NGRAVE: The Most Secure Wallet Ever Built

Self-custody of cryptocurrency has always involved a trade-off: the more control you exercise over your private keys, the more security you must provide yourself. NGRAVE, a Belgian hardware wallet manufacturer founded in 2018, was built on the premise that this trade-off could be almost entirely eliminated — not by clever software, but by removing connectivity from the equation altogether.

The company's flagship product, the NGRAVE ZERO, holds a distinction that no other consumer crypto hardware wallet can claim: it is the only air-gapped wallet to achieve EAL7 certification, the highest level of the Common Criteria Evaluation Assurance Level framework used to assess the security of information systems. EAL7 requires formal mathematical verification of security functions, a standard typically reserved for high-risk defense and financial infrastructure. NGRAVE earned it for a device that retails for under $400.

How the ZERO Works

The ZERO's defining characteristic is what it does not have. It carries no USB data connection, no Wi-Fi, no Bluetooth, no NFC, and no 4G radio. The only way information moves between the wallet and the outside world is through QR codes — visible light patterns that can be read by the device's built-in camera and displayed on its 4-inch touchscreen for a companion smartphone to scan.

When a user initiates a transaction, the NGRAVE LIQUID mobile app constructs an unsigned transaction and displays it as a QR code. The ZERO reads that code with its camera, displays the transaction details for review, signs it offline using the private key that never leaves the device, and then shows the signed transaction as its own QR code for the phone to broadcast. The private key is generated on the device and stays there. It has never been, and can never be, transmitted over a network.

The device itself is engineered around this philosophy. Its custom operating system was built from scratch rather than adapted from a mobile OS, eliminating a broad class of software vulnerabilities. Multi-layer tamper protection includes internal sensors that detect physical attacks and automatically wipe the device if breached. Biometric authentication via a fingerprint sensor works alongside an 8-digit PIN to control access. The housing is manufactured from a custom zinc, aluminum, magnesium, and copper alloy — not plastic — and is rated IP55 for dust and water resistance.

The Perfect Key and GRAPHENE Backup

NGRAVE's approach to key generation also departs from the standard 24-word seed phrase paradigm. The ZERO generates what NGRAVE calls a "Perfect Key" — a 64-character hexadecimal string that incorporates entropy from multiple sources, including the device's random number generator and optional user input via a light sensor during setup. This key can be converted to a standard BIP-39 seed phrase for compatibility, but NGRAVE designed an alternative backup specifically for it.

The NGRAVE GRAPHENE is a two-plate stainless steel backup system. Unlike engraved steel plates that simply inscribe a seed phrase, the GRAPHENE uses an encrypted split system: one plate contains a portion of the encoded key, and the other contains the decoding material. Neither plate is useful without the other, and both are fire-resistant, waterproof, and corrosion-proof. It is sold separately at $148, or bundled with the ZERO for $498.

Solana Support

NGRAVE added Solana support beginning with firmware version 1.2, making the ZERO one of the few air-gapped hardware wallets capable of securing SOL. The LIQUID companion app enables users to manage their Solana holdings, including the ability to swap and bridge SOL through integrated third-party services.

One meaningful limitation: the ZERO currently supports SOL itself but not Solana Program Library (SPL) tokens. This means native SOL and staking functionality are covered, but popular SPL tokens — such as memecoins like WIF or BONK — cannot be stored on the device. For Solana users whose holdings are concentrated in SOL rather than the broader SPL ecosystem, this is a workable constraint. For those deeply embedded in Solana DeFi or memecoins, it is a real gap relative to Phantom or Solflare.

For Solana transactions, the same QR-code signing flow applies. The LIQUID app constructs and displays unsigned Solana transactions; the ZERO signs them offline; the signed transaction returns to LIQUID via QR for broadcasting. The air-gap is preserved throughout.

Who NGRAVE Is For

NGRAVE sits at the top of the hardware wallet market by both security certification and price. At $398 for the ZERO alone, it is considerably more expensive than a Ledger Nano X ($149) or a Trezor Model T ($179). The premium buys the EAL7 certification, Belgian manufacturing, and the QR-code-only air-gap — none of which competitors currently match simultaneously.

The target user is someone with holdings large enough that the difference in security architecture matters, or someone in a professional, institutional, or high-risk context who needs to demonstrate due diligence about custody. For casual Solana users holding a few hundred dollars of SOL, the ZERO is likely over-engineered. For someone accumulating serious positions in SOL, Bitcoin, and Ethereum, the absence of any wireless attack surface is a meaningful guarantee.

The device also appeals on principle to users who distrust cloud-connected wallet infrastructure after years of exchange collapses, protocol hacks, and social-engineering attacks on software wallet users. NGRAVE's positioning — "the most secure wallet ever built" — is not a marketing claim without substance. The EAL7 certification is independently verified and cannot be awarded through self-assessment.

Broader Ecosystem

NGRAVE is a relatively small, focused company operating primarily in the security hardware vertical. It does not run a protocol, issue a token, or operate DeFi products. Its relationship to the Solana ecosystem is purely through custody: it is a place where Solana users can store SOL with the highest available hardware security certification.

The company maintains integrations with MetaMask and Rabby Wallet for Web3 access, and through LIQUID offers access to third-party services including Changelly for trading and Arch Lending for crypto-backed loans — allowing users to interact with broader DeFi activity without ever exposing keys.

For the Solana community, NGRAVE's growing support represents maturation of the hardware custody option set. Ledger has long been the default hardware choice for SOL holders, but its Bluetooth connectivity and Ledger Recover controversy in 2023 prompted many users to seek alternatives. NGRAVE offers the most security-hardened alternative currently available for those who want SOL off exchanges and under their own physical control.