Unruggable

TLDR

Unruggable is a Solana-only hardware wallet project that addresses a persistent gap in the ecosystem: dedicated signing hardware built around Solana architecture rather than retrofitted from generic multi-chain devices. The project ships in two physical form factors, the S1 in injection-molded ABS and the A1 machined from aerospace-grade aluminum, each paired with an open-source companion application written in Rust. The core promise is sign-in-place security where a private key never leaves the device, combined with a DeFi-integrated companion app that makes staking, swapping, and multisig feel like features of a hot wallet. Unruggable won the grand prize at the Solana Cypherpunk Hackathon, the largest crypto hackathon on record by submission count, and its initial hardware run sold out before general shipping began.

Core Mechanism

The hardware security model is straightforward: an ESP32 microcontroller generates an Ed25519 keypair on first boot, stores it in non-volatile storage, and never exposes it to a connected host. The device communicates with the companion application over a serial protocol, responding to two commands: GET_PUBKEY returns the public address, and a base64-encoded transaction payload triggers a signing request. A physical button press on the device is required to confirm each signature, meaning no software exploit on the host machine can produce a signed transaction without physical access to the hardware. The private key is never transmitted; only the resulting signature leaves the device.

On the software side, the companion app acts as the transaction construction layer. Built in Rust using the Dioxus framework, it runs natively on iOS, Android, macOS, Windows, and Linux. The app connects to Solana via Helius RPC, assembles unsigned transactions based on user intent, passes them to the hardware for signing, and broadcasts the signed output to the network. This separation of concerns gives users the interaction speed of a hot wallet without the key exposure risk of keeping credentials in browser storage or app memory.

The companion app also supports an optional software-only mode, allowing users without physical hardware to operate it as a conventional non-custodial mobile wallet before upgrading to the hardware signing layer.

Features and Integrations

Unruggable is explicitly built for the Solana ecosystem rather than adapted to it. The companion app ships with direct integrations across major Solana DeFi infrastructure.

Staking: Native support for validator staking through multiple partners including Gojira, Saga DAO, SolBlaze, Sentinel, and Adrastea, with two-tap setup from within the app.

Swaps and trading: Jupiter exchange integration and Titan aggregated trading for token swaps. JITO integration provides transaction bundling and tip optimization for time-sensitive transactions.

Lending: Jupiter Lend access from within the app.

Multisig: Native Squads multisig integration reduces single points of failure by allowing users to require multiple approvals before any transaction is signed. This is available directly in the companion app without a separate interface.

Privacy: Anza-based privacy cash transfers are included as a native feature.

DeFi protocols: Integrations include Carrot, Bonk Staking, Quantum Vault, Phase Labs, The Library, Stache, Sphere, and MetaDAO.

Name services: The app resolves both Solana Name Service (.sol domains) and Arweave Name Service domains (.abc, .bonk), enabling human-readable addresses in the send flow.

The hardware also supports Ledger device compatibility for users who already own Ledger hardware and want to use it with the Unruggable companion app.

Security configuration includes optional two-factor authentication at device unlock. Users can complete initial security setup in under 30 seconds, a deliberate design constraint to reduce adoption friction.

Hardware Models

Two physical units are offered. The S1 uses injection-molded ABS plastic construction at a lower price point. The A1 uses machined aerospace-grade aluminum for a more durable form factor. Both run the same ESP32-based signing architecture and work with the same companion application. The initial run sold out before general shipping, with the A1 announced alongside broader pre-order availability. The first stable companion app release (v1.1.0) arrived in June 2026, with v1.1.1 following shortly after to address platform-specific display issues.

Open Source and Transparency

The companion app and hardware firmware are both fully open source. The primary repository at github.com/hogyzen12/unruggable-app is written in Rust (approximately 85% of the codebase by language share) and has received 14 tagged releases. A separate repository, github.com/hogyzen12/unruggable-rust-esp32, contains the ESP32 firmware with documentation for developers wanting to build a compatible hardware signer from commodity components.

The original Unruggable project at github.com/hogyzen12/unruggable was a Bash-script CLI wrapper for Solana designed to protect against common rug mechanics. The current hardware wallet project grew from that privacy-first foundation, scaling from a developer-focused CLI tool into dedicated consumer hardware.

Remaining open source is explicitly enabled by a sponsor roster including the Solana Foundation, Colosseum, JET Protocol, STUK, Areta, and Helius. This structure keeps the codebase publicly auditable without requiring per-user software fees.

Audits

No independent security audits of the firmware or companion application were disclosed in publicly available documentation at the time of writing. The firmware and app are open source, which enables community review, but formal third-party audit reports have not been published.

Team

Unruggable is primarily the work of a single developer, GitHub handle hogyzen12 (bill_papas_12). The repositories list one contributor across their commit history. The solo-developer structure is notable given the breadth of integrations and multi-platform build complexity, though it also concentrates development continuity risk in one person.

Solana Fit

Unruggable is among the few hardware wallet projects built exclusively for Solana rather than supporting it as one chain among many. This single-chain focus tightens the integration story: the device handles Solana's Ed25519 curve natively, the companion app speaks Solana RPC directly, and the DeFi integrations map to protocols Solana users actively use rather than generic token-transfer patterns ported from EVM conventions.

The project's Cypherpunk Hackathon win from a field of over 1,500 submissions across more than 9,000 participants provides a credible signal of ecosystem interest. Endorsement from the official Solana Twitter account and direct backing from the Solana Foundation indicate recognition at the protocol layer. The gap Unruggable targets is real: existing hardware wallets like Ledger and Trezor support Solana but were not designed for it, typically requiring browser extensions or secondary apps for staking, multisig, and DeFi interaction. Unruggable consolidates these workflows into a single hardware-backed interface built specifically for the chain.