NGRAVE ZERO: what the sources say
Current 0 disclosed weaknesses 0 company incidents
The questions, with sources
"n/v" or "not verified" means we could not confirm it from a source we could read. Maker claims are marked as such. Confirm on the maker's site before you buy. Education only, not investment advice.
Five facts
- NGRAVE is operated by Hestara SRL in Belgium; the ZERO is an air-gapped QR-only wallet with a 4-inch touchscreen and fingerprint sensor [source 3].
- The US store lists the ZERO at $398 and showed it sold out on 2026-10-11 [source 2].
- NGRAVE claims EAL7 certification for the ZERO's custom OS; the evaluating body and scope are not stated on the pages read [source 5].
- NGRAVE says firmware will be gradually open sourced except the secure element and secure OS, with no timeline given [source 4].
- Maker pages are inconsistent on the number of supported coins (15, 16, or +3,500 coins and tokens) [source 3].
Audits
- No independent audit found in our search.
Publicly disclosed weaknesses
- No publicly disclosed weakness found in our search. That is not proof there is none.
Disclosed weaknesses are listed whatever their severity. "Funds lost" is what the sources say. "Fixed" means the source states a fix exists, which only helps if you update.
Incidents at the maker or its service providers
- No company incident found in our search.
These affect the company or its customers and apply to every device of the brand. They are not weaknesses of this device.
Questions about NGRAVE ZERO
Is NGRAVE ZERO safe?
We do not give a yes or no, because safety depends on what you need to protect and on facts that change. We found 0 publicly disclosed weaknesses and 0 company incidents in our search. Read the sources above before you buy.
Does NGRAVE ZERO need an internet connection?
Signing happens on the device. How the device talks to your phone or computer depends on its connections: QR. The companion app or software that builds the transaction is online.
Who found the weaknesses listed for NGRAVE ZERO?
The page names who disclosed each one when the source does. Several were found by a competing maker's research team or by independent security firms. We cite the affected company's own statement where we found one, and label press-only reports.
Where this comes from
- [1] NGRAVE home page accessed 2026-10-11
- [2] NGRAVE shop ZERO (US store) accessed 2026-10-11
- [3] NGRAVE ZERO product page accessed 2026-10-11
- [4] NGRAVE support: Is the ZERO open source? accessed 2026-10-11
- [5] NGRAVE Custom OS page accessed 2026-10-11
- [6] Coin Bureau NGRAVE ZERO review accessed 2026-10-11
Not verified: No independent audit, vulnerability disclosure, incident or bug bounty found (one broad search returned irrelevant results; absence not proven). EAL7 certificate, chip model, EUR price, multisig, app open-source status, passkeys not verified. Official EU store not read; discontinuation status unclear (sold out on US page).
See how we check. To report an error, use corrections and right of reply.