Own your crypto. Your way. Air-gapped cold wallets and NFC cards. No exchange in the middle. No TG, DC, FB groups or other X accounts.
Blockchain
Joined June 2018
- Tweets12K
- Following890
- Followers151K
- Likes8.1K
Pinned Tweet
ELLIPAL's Answer to Supply Chain Attacks, built layer by layer since 2018:
- Hard to open, built to show it
- Designed to wipe data if forced open
- Seed phrase made offline in the secure chip
Our team ran onsite tests, here is what happened:
ellipal.com/blogs/security-r…
Good question from the replies: If a new XRP wallet needs 1 XRP to activate, how does that first XRP get there?
It comes with your first transfer.
Just send enough to cover the 1 XRP reserve plus the exchange fee. Once it arrives, your account is active.
First XRP withdrawal to a new wallet failed?
It may be the amount, not the address.
A new XRP account needs 1 XRP to activate. That 1 XRP stays reserved.
See full breakdown:
ellipal.com/blogs/guides-com…
First XRP withdrawal to a new wallet failed?
It may be the amount, not the address.
A new XRP account needs 1 XRP to activate. That 1 XRP stays reserved.
See full breakdown:
ellipal.com/blogs/guides-com…
Picking a cold wallet?
Start with how often you move your crypto.
Savings you touch a few times a year,
or coins you use every week.
Four factors, two ELLIPAL wallets.
See full breakdown: ellipal.com/blogs/guides-com…
Agreed. Every setup carries some risk. The real choice is which risks you hold.
With a hardware wallet, your keys are generated and stored offline, away from malware on your phone or laptop.
What stays with you: the backup and checking what you sign.
Does Titan 2.0 make X Card obsolete? Someone asked.
No. Different needs. Same control over your keys.
Titan 2.0: air-gapped QR signing for long-term holdings.
X Card: NFC signing for everyday use.
Already have a seed phrase? ELLIPAL X Card supports it.
Import it through the offline Starter, or generate a new one with the card’s secure chip.
Battery-free NFC. Set up in 3 minutes.
youtube.com/shorts/NwzUoGUwF…
Worth repeating: a compromised site can look exactly like the real one.
No website needs your seed phrase. If one asks, leave.
Before you sign, check the address on your wallet, not just on the page.
Call me paranoid, but be extra careful visiting ANY web site in the next few days, as some web admins are not always up-to-date with security patches.
Two vulnerabilities (CVE-2026-109618 and CVE-2026-109619) reported for PHP, the web programming language, affecting servers running popular apps like WordPress and Magento, with patches released October 21, 2026 after details leaked early.
Exploitation was confirmed in the wild soon after disclosure, prompting quick WAF protections and patching by IT teams, as unauthenticated attacks could turn visited sites into vectors for credential theft or device exploits.
Stay SAFU!
Coinbase will convert any GYEN still on the platform to USDC from Oct 26.
Its own notice says: to keep it as GYEN, move it to a self-custody wallet before then.
Check your wallet supports GYEN on the same network before you send.
See full breakdown:
ellipal.com/blogs/guides-com…
Same lure: a fake alert, then a box for your seed phrase.
This hurts everyone who holds their own keys, whichever wallet they use.
If any alert, banner or message asks for your seed phrase, don't enter it.
Second wallet maker in two days whose own app notifications were used to phish seed phrases. SecuX, now NGRAVE.
The lure: your wallet just synced on a Pixel 9 in Moscow. Fear first, then a box for your 24 words.
The only time you type your seed is when you chose to restore a wallet. Never because an alert told you to.
Can your phone replace a hardware wallet?
Phone chips store keys well. The gap is the rest of the phone: apps, links and a live connection.
A hardware wallet keeps your keys on a device that only signs.
See full breakdown:
ellipal.com/blogs/security-r…
