Patrick Collins Profile picture
Mar 24 β€’ 17 tweets β€’ 6 min read β€’ Read on X
πŸ”’Top 9 Cryptocurrency Hardware Wallets of 2025 πŸ”’

After seeing the Bybit team hacked for $1.4B, Radiant Capital hacked for $50M, and many other teams hacked due to not verifying signed data, I wanted to find out:

Which wallet does it best? πŸ‘‡

We review all 9 in this thread! Image
So I spent over $1,000 to buy fresh new hardware wallets to figure out which wallet is the best for BOTH:

- Technical users
- Non-technical

Specifically, I asked, "Would I recommend this wallet to @benbybit?"

You can view this on YouTube:
All hardware wallets should do 1 thing:

"Protect your private key"

Other than that, we wanted to know: which wallets help you verify your data the best?

I also wrote a blog if you would prefer that:

medium.com/@patrickalphac…
Methodology

To test these wallets, we connected them to the @safe UI through @MetaMask and both:

1. Sent a transaction
2. Signed EIP-712 data

The wallets MUST show us some data, and ideally also decode some data. Image
So we tested how easy it was for us to get/verify this data, AND we also checked other features like:

- Secure Element
- Open sourced
- User Experience
- etc

Which we combined together in a simple image with the following information, along with a rating. Image
At the end, I will give my final recommendations. You can refer to the image at the start of this thread if you want to see more information on what went into my testing.

Let's get started.
The @Tangem wallet was very convenient but didn't show a lot of crucial information (calldata), and was closed-sourced.

I wouldn't put a lot of money in this because the wallet doesn't show any calldata! I could see it being nice as just a fast wallet of the future though. Image
The @CypherockWallet was a step up being open sourced, and having an actual hardware device. It was a little less convenient, but it shared the same issue as the Tangem, it didn't show any calldata on a transaction! Image
The @KeystoneWallet Pro 3 was ALMOST my favorite wallet, and then it fell short at the finish line.

Open sourced, and bragged about how it decodes calldata. This would have been good, but the decoding ending up truncating calldata in some instances, that's actually much worse! Image
The @Trezor Model T is the first "solid" wallet on our list. Open-sourced, shows all calldata, shows all signature data, the only issue is that it doesn't have a secure element. Image
The @Trezor Safe 5 is essentially the same, just with a secure element.

This wallet could very easily be the best with a few firmware upgrades. It would be nice to be able to get calldata off the device easier, a better UI, and show message & domain hashes on EIP-712 sigs. Image
Sadly, we go back to closed-sourced with the @Ledger Nano X. But the wallet, like the Trezor Model T, is still very "solid".

It just shows data in a really bizarre format, and the two button interface is quite clunky.

Just use the Ledger Flex if you want a Ledger. Image
The @Ledger Flex and the Nano X BOTH have the amazing feature of being the only two wallets on this list that show EIP-712 data in a preferred format.

The touchscreen is outstanding, my favorite of all wallets. It just has bizarre formats and settings names like the nano. Image
The @OneKeyHQ wallet was also close to being my favorite, but it failed the reproducibility tests on @WalletScrutiny.

Other than that, UI was great, showed enough data, very solid wallet. Image
tbh, I didn't want to like this wallet because of it's weirdness, but the @gridplus had the AMAZING unique feature of decoding both calldata and nested calldata, which was outstanding.

Sadly closed-sourced, and I wish I could get the raw calldata & Safe TX Hash on signatures. Image
There is never a "right" choice when it comes to these, as every wallet has it's trade offs.

But as of today, my top picks would be the following based on your needs. Image
If you think I got something wrong, let me know!

Otherwise, please share my list so others can be informed when buying a hardware wallet!

Shoutouts to @pcaversaccio, @officer_cia, @0xMidnight, and @WalletScrutiny for their content on wallets that helped me!

β€’ β€’ β€’

Missing some Tweet in this thread? You can try to force a refresh
γ€€

Keep Current with Patrick Collins

Patrick Collins Profile picture

Stay in touch and get notified when new unrolls are available from this author!

Read all threads

This Thread may be Removed Anytime!

PDF

Twitter may remove this content at anytime! Save it as PDF for later use!

Try unrolling a thread yourself!

how to unroll video
  1. Follow @ThreadReaderApp to mention us!

  2. From a Twitter thread mention us with a keyword "unroll"
@threadreaderapp unroll

Practice here first or read more on our help page!

More from @PatrickAlphaC

Feb 13
I could have lost the company billions.

That's right, billions.

When I was first breaking into my technical career, I accidentally deleted a file critical to my company's infrastructure. Here's what happened. πŸ‘‡
I'm a couple years out of college after bouncing around jobs. I wasn't doing so hot in my career.

I'd been fired.
I'd quit because I wasn't hitting quotas.
I was struggling.

Before getting the job, I said, "I'm going to do everything in my power to smash this job"
I got the job because no one else in Boston wanted to do it.

πŸͺ¦ It was the graveyard shift: Clock in at midnight, out at 9AM, but I was often there till 2PM.

It was my dream job. I could learn everything I wanted, finance, technology, how to tie a tie.
Read 17 tweets
Aug 16, 2024
I'm 31.

Here are 10 tips I wish I told me at 21.

1. You have zero talent. You will think you are "good at things," but you are not. Anyone can GET good at anything, but you have to work hard to get there. Others will be better than you at the start. That's ok.
2. Consistency is a hell of a drug.

In order to get good at something, you must fall in love with the process and work at it every day. Something that seems impossible will become possible if you work at it every day.
3. Radical Candor is challenging your peers while being empathetic.

This constructive discourse is how we push each other to be better, and it is the nicest thing you can do for someone. You will always want to complement people, but sometimes, that is harmful if not true.
Read 12 tweets
May 8, 2024
Tokenized RWAs / Tokenized Real World Assets

What are they?
How do you make one?
How easy or hard are they?

Let's go πŸ‘‡
If you want to read the article or watch the video, you can see them here:

Before understanding tokenized RWAs, let's understand what a "tokenized" asset is.

A tokenized asset is comprised of 3 characteristics:

1. Asset represented location
2. Collateral location
3. Backing type

Let's look at a common RWA to understand what this means.

Like USDC
Read 13 tweets
Dec 13, 2023
SMART CONTRACT SECURITY AND AUDITING FULL COURSE IS NOW OPEN TO EVERYONE ON CYFRIN UPDRAFT

🎊🎊🎊🎊🎊🎊🎊🎊🎊🎊🎊🎊🎊🎊

In just 22 hours, the top web3 experts walk you through 5 increasingly difficult audits to drill security power into you.

Here's what you need to knowπŸ‘‡ Image
You can find the entire course on @cyfrinupdraft HERE:


Part 1 is broken down into 9 insane sections. I'm finishing part 2, which will focus on assembly, opcodes, huff, and formal verification.

Part 2 will come out within 2 months.updraft.cyfrin.io/courses/securi…
This course is for anyone and everyone who wants to:

- Make web3 safer
- Become a top 1% smart contract dev (avg. salary $150k)
- Become a solo auditor
- Get hired at a security firm (avg. salary $125k)
- Become a bug hunter (up to million-dollar payouts)

Or you love learning
Read 19 tweets
Oct 27, 2023
Imagine being able to send ETH to your friend cross chains without anyone knowing:
- what token
- to whom the tx goes
- from whom

And also encrypt a message telling them β€œI’m old enough to get into the bar”

I just had a crazy interview with Mind Network, highlights here πŸ‘‡
1. Mind Lake

Using Zero Knowledge Proofs and Fully Homomorphic Encryption (will explain soon) you can store data in a zero knowledge fashion into their Mind Lake network.

- medical information
- financial info
- personal info
- if you’re old enough to slam a pint of beer
For those in the back, zero knowledge proofs have the ability to answer the validity of a statement without giving out additional information.

For example, telling a bouncer at a bar you’re old enough to drink without telling them exactly how old you are.
Read 9 tweets
Jul 20, 2023
How to get into competitive audits:

1. Learn basic solidity/vyper
2. Start doing competitive audits

The more audits you do, the better you'll get.

Here is your gameplan going into an audit, and exactly how to get the most out of your first one πŸ‘‡
1. Block off hours of time

Auditing takes hours of deep work. Deep is long uninterrupted periods of time.

If you want to be successful, you need to focus. Some auditors use pomodoro techniques where they:

- push for 55 minutes, take a 10 minute break

And repeat this
How much time do I need?

Well, that depends on how long the audit is and how familiar with the code you are.

Your first couple of audits, you'll do terribly.

Yup.

You'll probably suck.But sucking at something is the first step to being really good at something.
Read 10 tweets

Did Thread Reader help you today?

Support us! We are indie developers!


This site is made by just two indie developers on a laptop doing marketing, support and development! Read more about the story.

Become a Premium Member ($3/month or $30/year) and get exclusive features!

Become Premium

Don't want to be a Premium member but still want to support us?

Make a small donation by buying us coffee ($5) or help with server cost ($10)

Donate via Paypal

Or Donate anonymously using crypto!

Ethereum

0xfe58350B80634f60Fa6Dc149a72b4DFbc17D341E copy

Bitcoin

3ATGMxNzCUFzxpMCHL5sWSt4DVtS8UqXpi copy

Thank you for your support!

Follow Us!

:(