NGRAVE ZERO
Hestara SRL (NGRAVE)
Data verified on unchanged since the sources
Worth it if you want maximum isolation: full air-gap via QR and an EAL7-certified secure element, the highest level in the category, from an EU (Belgium) company.
Avoid it if price is a dealbreaker (about €398, Combo about €498, among the highest on the market) or you require a verifiable open-source operating system.
NGRAVE ZERO, made by Belgium's Hestara (NGRAVE brand), is an air-gapped hardware wallet that communicates only through QR codes: it has no data USB, WiFi, Bluetooth or NFC for transactions, and its USB-C port is used only for charging and firmware updates. It carries a Common Criteria EAL7-certified secure element, the highest level claimed in this category. Backup does not use the classic paper seed phrase but the "Perfect Key" (a 64-character hexadecimal key, convertible to a 24-word BIP-39 seed) combined with GRAPHENE, an encrypted stainless-steel backup. It claims support for over 3,500 assets (Bitcoin, Ethereum and ERC-20, MultiversX, NFTs). Pricing is among the highest on the market: about €398 for the ZERO alone, about €498 for the Combo with GRAPHENE. The EAL7 operating system is proprietary: its security model must be taken on trust rather than verified in the code.
Data & conditions
| Fund custody | Self-custody (funds in your control) |
|---|---|
| Type | Hardware (cold storage) |
| Source code | Closed-source |
| Recovery | Perfect Key (64 caratteri esadecimali, convertibile in 24 parole BIP-39) + backup in acciaio GRAPHENE cifrato |
| Bitcoin-only | No |
| Supported chains | Bitcoin, Ethereum, ERC-20, MultiversX |
| Price | €398 |
| Secure element | Yes |
| Air-gapped | Yes |
| Connectivity | QR, USB-C |
| Built-in swap | No |
| Built-in staking | No |
| Segment | B2C |
| MiCA / License status | Nessuna (hardware wallet self-custody) |
Plans & pricing
Strengths
- 100% air-gapped via QR (no data USB/WiFi/Bluetooth/NFC); EAL7-certified secure element; encrypted GRAPHENE steel backup; broad multi-asset support; EU-based company (Belgium).
- Self-custody: funds stay in your wallet — the platform cannot touch them.
- No KYC: usable without identity verification.
- Self-hostable: you can run your own instance or node.
Weaknesses
- High price (about €398, Combo about €498); proprietary, non-open-source operating system (limited code verifiability); QR-only signing flow less immediate for users coming from USB wallets.
- Closed source: no way to verify what it does with wallet and data.
Verdict
Score 4.3/5, very strong profile. In its favour: 100% air-gapped via QR (no data USB/WiFi/Bluetooth/NFC); EAL7-certified secure element; encrypted GRAPHENE steel backup; broad multi-asset support; EU-based company (Belgium). The trade-off to weigh: high price (about €398, Combo about €498); proprietary, non-open-source operating system (limited code verifiability); QR-only signing flow less immediate for users coming from USB wallets.
On the Sovereignty lens the score is 3.8/5 (very strong): the strength is fund control (5.0/5), while trustless / auditability (0.0/5) is the weak link.
Promp's editorial rating based on real fees and net annual cost. Promp reviews third-party products independently.
"Sovereignty" rating: score computed on privacy/anonymity (30%), fund control (20%), censorship resistance (20%), trustless/auditability (20%) and costs (10%). Same data, different weights.
Reputation
What happened to people who used NGRAVE ZERO, and what users say. External signals: they do not feed the promp.it rating.
Incidents & regulatory actions
Notable incidentsDocumented events with consequences still open. Each entry carries a source and a date.
-
Hack / funds theft Severe $3M ● open
Fake security alert sent through the LIQUID app via the compromised notification provider: about $2.56M stolen from users who entered their recovery phrase
The flaw lies in the LIQUID app's notification system, not in the ZERO device: according to NGRAVE's official report of 19 Oct 2026, attackers took over the access of the third-party provider that sends LIQUID's push notifications (earliest signs of access from 11 Oct). On 17 Oct at about 21:30 UTC they sent users a fake "security alert" (a sync from a Pixel 9 in Moscow), delivered through the same channel as real notifications, leading to a copy of the NGRAVE website that asked for the 24-word recovery phrase or the Perfect Key. Anyone who entered one had their wallet emptied within minutes. NGRAVE shut down all sending at 22:45 UTC; the last traced theft was at 03:51 UTC on 18 Oct. Amount traced by NGRAVE: about $2.56M from about 70 addresses on four networks (BTC $1.77M, XRP $454k, Ethereum assets $316k, Stellar $18k), stated as a minimum. With the second key the attacker also copied the notification list (phone model, app version, country, time zone, possibly IP and approximate location) and could read swap history, usage data and some data-deletion requests (email and order number); names and shipping addresses sit in a separate system and were not reachable. Private keys, recovery phrases and the ZERO device were not breached. NGRAVE replaced every key, reported the exposure to the Belgian Data Protection Authority and asked exchanges and bridges to freeze funds; the CEO wrote that the company had "absolutely and utterly failed" on security. LIQUID was back online on 20 Oct. No reimbursement has been announced.
↗ source
verified on
FAQ
How much does an NGRAVE ZERO cost?
The ZERO device alone costs about €398 (€398.00 on the official store). The Combo, which includes the ZERO plus the GRAPHENE steel backup, costs about €498 (€498.00). Prices in euros from the NGRAVE store, August 2026.
Is NGRAVE ZERO really air-gapped?
Yes: it communicates only through QR codes and never uses data USB, WiFi, Bluetooth or NFC for transactions. The USB-C port is for charging and firmware updates only, not for signing or moving funds.
Is NGRAVE ZERO open source?
No: the EAL7-certified operating system is proprietary. The Common Criteria certification attests to the secure element's security level, but the code is not published as open-source, so we classify it as closed-source.
Sources
- Official service page Eal7 · Air gapped qr · Asset · Recovery · +1 Data verified on Aug 3, 2026
- shop.ngrave.io Prezzo eur · Combo Data verified on Aug 3, 2026