ERA Introduces Software Wallet to Complement Its Air‑Gapped Hardware Device

ERA, the Dubai‑based maker of an air‑gapped hardware wallet, has launched a companion mobile application that turns its device into a full self‑custody ecosystem. The app handles transaction preparation, while the hardware wallet signs every transaction via QR code or NFC, ensuring private keys never leave the device.

Key Features of the ERA Software Wallet

• Supports 14 networks: Bitcoin (SegWit, Taproot, Legacy), Ethereum, Solana, Tron, Base, Arbitrum, Optimism, Polygon, BNB Chain, Avalanche, Gnosis, zkSync, Kaia and Aurora.
• Portfolio view with balances tagged by network.
• Send/receive with a network guard to prevent cross‑chain mistakes.
• Integrated buy‑sell providers with automatic KYC and rate comparison.
• Swap and bridge functionality powered by Rango, showing full quotes before signing.
• WalletConnect integration for dApp access, requiring hardware‑signed approval.
• App‑level security: PIN, biometric unlock, auto‑lock, screen‑privacy and screenshot blocking.

Security Audits and On‑Device Enhancements

ERA commissioned a full white‑box audit from cybersecurity firm Cure53. The audit covered source code, builds, API, transaction construction and QR/BC‑UR signing flows. All findings were addressed and retested before release.

The hardware device also received updates, including:

• Bitcoin multisig support, allowing the device to act as a cosigner in multi‑signature arrangements.
• On‑device TOTP generation for two‑factor authentication.
• Device authenticity verification using a factory‑burned key.

ERA Lens Scam‑Warning System

ERA Lens, the built‑in transaction‑decoding layer, now displays plain‑language scam warnings and expands coverage to additional DeFi and bridging protocols. It can decode newer transaction formats such as EIP‑7702, ERC‑7821 and Safe multicalls, automatically flagging unlimited approvals to unfamiliar addresses.

Extended Protection in the Mobile App

• Warnings for unused token approvals with a dedicated revocation screen.
• Address‑poisoning protection that blocks transactions to look‑alike addresses.

Between July 2 and August 1 2026, ERA recorded 66 fake entries across 24 poisoned addresses, blocking them without user override.