ELLIPAL

Own your crypto. Your way.
Air-gapped cold wallets and NFC cards. No exchange in the middle.

No TG, DC, FB groups or other X accounts.

[ELLIPAL @ELLIPAL]

Black Friday Mega Bundle 🖤

ELLIPAL Titan 2.0, ELLIPAL X Card and Seed Phrase Steel in one bundle, $210 off.

Set up your own, or share it with someone you'd like to see in self-custody.

[ELLIPAL @ELLIPAL]

Your USDT and USDC can earn while they wait.💰

Deposit on Ethereum, sign on your own wallet, withdraw when you need to.

No lock-up period.

[ELLIPAL @ELLIPAL]

Day one with your new wallet.

ELLIPAL Titan 2.0: create the wallet, write down the seed phrase on screen.
ELLIPAL X Card: create it with the Starter, write down the words it shows, tap to pair.

Once the words are on paper, you're ready to go.

[ELLIPAL @ELLIPAL]

Your seed phrase belongs on paper or metal, not in Notes or Photos.
Update iOS. Think twice before sideloading.

Let the phone run the App.
Let a hardware wallet hold the keys.

[SlowMist @SlowMist_Team]

🚨 SlowMist TI Alert: iOS sandbox escape 0day PoC “worse_query” disclosed 🚨

A public PoC for a sandbox escape 0day, worse_query, targets iOS 26.0–26.7.2 and iOS 27.2. It is the successor to bad_query. 📱

⚠️ This is a container sandbox escape, not a jailbreak. It breaks the assumption that apps can’t see each other: a malicious app that successfully exploits it can reach system paths and read or modify other apps’ data.

💸 The bug does not steal assets by itself. The real risk starts when a user installs an app from an untrusted source, such as a sideloaded IPA. If a wallet stores its seed phrase, keystore or WebView cache in plaintext locally, a malicious app could read it.

🛡️ Recommendations:
🔸 Don’t install IPAs or apps from unknown sources
🔸 Keep iOS up to date and install Apple’s fix as soon as one is released
🔸 Wallet developers: don’t store sensitive data in plaintext locally
🔸 If you installed an untrusted app on a device holding wallets, treat it as risky and consider moving assets to a new wallet created on a clean device

🔗 https://t.co/sIP4hX85TR

[ELLIPAL @ELLIPAL]

Search yours before you buy: https://t.co/cSxs5ht7AK

[ELLIPAL @ELLIPAL]

We get asked which coins we support.

10,000+ tokens across 45+ chains.
BTC, ETH, SOL, XRP and a long list after that, on ELLIPAL Titan 2.0 and ELLIPAL X Card.

Not every chain is there yet.
Which one should we add next? Drop it below.

[ELLIPAL @ELLIPAL]

@wb_1776 Thanks for telling us. Energy Web Chain isn't supported right now, and we've noted your request.

[ELLIPAL @ELLIPAL]

The first coin I'm moving off an exchange this month is ____.
One word is enough.

[ELLIPAL @ELLIPAL]

Who should hold your keys?

With an ETF, a custodian holds the bitcoin. You hold shares.
With a hardware wallet, you hold the keys. Keeping the backup safe is on you.

Pick the trade-off that fits you.

[Bitcoin Magazine @BitcoinMagazine]

JUST IN: The world's largest asset manager BlackRock says demand is surging to convert self-custodied bitcoin into ETF shares, citing security concerns 👀

[ELLIPAL @ELLIPAL]

Everyone's running the gf flowchart today.
Here's the one for your cold wallet.

[Pix🔎 @PixBuilds]

How To Tell If Your Girlfriend Is A Spy:

[ELLIPAL @ELLIPAL]

Your first day with a hardware wallet, in order ✒️:

Write down the seed phrase offline and check every word.
Keep that backup somewhere only you can reach.
Send a small amount first and confirm it arrives.

Then add the rest.

[ELLIPAL @ELLIPAL]

Minneapolis, we're bringing cold wallets 🙌

On Tuesday, Nov 10, we're teaming up with @UMNBlockchain at Tate Hall: a cold wallet session, free food from the club, and ELLIPAL wallets up for grabs.

RSVP here 👇
https://t.co/bpluvmiZ5L

[zhen zhuang @Solo_Gopher]

@umnblockchain x @ELLIPAL

This Tuesday, we’re hosting an event on cold wallets and why they’re so important for keeping your crypto safe.

We’ll go over how cold wallets work, what we can learn from major security incidents like the recent Binance hack, and finish with an interactive activity.

Everyone will have a chance to get a FREE ELLIPAL cold wallet!

📍 Tate Hall, Room 105
📅 Tuesday, November 10 | 7–8 PM
🍔 Free food and drinks provided!

Open to everyone, no experience needed.

RSVP on Luma: https://t.co/embESowDgf

[ELLIPAL @ELLIPAL]

Picking your first hardware wallet this month?

What's the one thing you still want to know before you order?

[ELLIPAL @ELLIPAL]

The moment that matters with a hardware wallet is right before you sign.

ELLIPAL Titan 2.0 reads the transaction itself and shows the address and amount on its own screen.
You check them, then sign by QR code.

On sale for Black Friday:
https://t.co/toPqRxFTGc

[ELLIPAL @ELLIPAL]

Got your ELLIPAL Titan 2.0?

With screen sealed all the way around with high-temperature adhesive.
Opening it breaks the screen, leaving a device that can't be set up.

If the screen and case arrive intact, set it up and write down your own seed phrase.

[ELLIPAL @ELLIPAL]

Infostealers take what's saved on your computer.
Keys generated and stored offline on a hardware wallet aren't there to take.

[SlowMist @SlowMist_Team]

🚨 SlowMist TI Alert: Beware of the “Cracked TradingView Premium” Infostealer 🚨

Since mid-October, X account "cryptotrice" has repeatedly promoted a so-called “reverse-engineered cracked #TradingView Premium,” with some posts passing 300K views. The software requires downloading a password-protected archive and generating a license code via a KeyGen. 🔑

The author claims the project is open source on GitHub, but the download link in the article does not point to #GitHub. In some replies, the author also said the repo has been made private and that links are only available in-app and expire after a single use. Several users warned in the comments that it looks like malware stealing account info and crypto wallets, and one said their antivirus flagged and deleted it right after extraction. 🦠

We analyzed it and confirmed the Windows sample is an infostealer:
🔸 Collects browser credentials, crypto wallet data and Telegram data, and sends it to the C2 via WinINet
🔸 Uses Telegram and Steam to dynamically fetch and rotate C2 servers
🔸 The download site, arche-hypnose[.]com, appears to be a legitimate website compromised to distribute the malware
🔸 The macOS link currently returns 404, so no sample has been obtained

⚠️ If you have already run this software: disconnect from the network immediately, move your assets to a clean device with a new wallet and seed phrase, change passwords for your browsers, exchanges, email and Telegram, and terminate active Telegram sessions.

Cracked software, KeyGens and password-protected archives are among the most common ways infostealers are distributed. Don’t install them. 🛡️

IOC
Sample source: teapawt[.]org/cryptotrice/article/2111472920241524897

Download links:
hxxps://www[.]arche-hypnose[.]com/get/ (Windows)
hxxps://www[.]arche-hypnose[.]com/mac/ (macOS, currently 404)

C2:
hxxps://xn[.]amanlay[.]org/rn/gate
hxxps://z[.]dak69[.]org/j/gate
hxxps://xn[.]amanlay[.]org/kw/gate

[ELLIPAL @ELLIPAL]

@NGU_INC Good question. Opening ELLIPAL Titan 2.0 is designed to break its sealed screen and leave visible mark.
On arrival, check that the case and screen are undamaged and create the seed phrase yourself.
What we tested: https://t.co/CAiyWjK7rK

[ELLIPAL @ELLIPAL]

Seed phrase or private key? They do different jobs.

A seed phrase backs up the whole wallet.
A private key signs for one address.

Write the seed phrase down offline before your first withdrawal lands.

[ELLIPAL @ELLIPAL]

Two kinds of people on your gift list.

For the one who wants a screen and a QR scan or the one who'd rather tap a card

Both on sale for Black Friday.
https://t.co/NKGpiyCFLc

[ELLIPAL @ELLIPAL]

That "required firmware update" email some hardware wallet buyers received.

Don't open the link or type your recovery phrase, even if the order details look right.

Got one? Forward it to [email protected].