Open Bitcoin safety research
Bitcoin hardware wallet safety benchmark
This annual benchmark compares what public evidence says about hardware-wallet safeguards. It measures documentation against version 1.0.0 of the BitcoinSafe threat model. It does not name a safest wallet.
A documented control is not proof that implementation is flawless. A missing or unverified record is not proof that a safeguard is absent. Use the evidence links and your own threat model.
Current edition
2026
The first edition covers four supported products, six threat-model controls, and 24 reviewed evidence records with a cutoff of August 28, 2026.
Frozen scope
BitcoinSafe froze product eligibility, evidence types, controls, and exclusions before deriving any state. This disclosed sample is not a market census.
Eligibility rules
- The product had to support Bitcoin and remain sold or receive documented firmware support at the evidence cutoff.
- The product needed public manufacturer documentation for the selected controls and at least two eligible independent review records.
- The sample was frozen before states were derived. It is a disclosed research sample, not a census of the market.
Exclusion rules
- Discontinued products without current firmware support were excluded.
- Products without enough dated public evidence for every selected control were excluded from this first edition.
- Price, popularity, asset count, affiliate terms, and manufacturer preference did not affect eligibility or evidence states.
Evidence-state definitions
Eligible public evidence directly describes the measured control.
The reviewed public documentation does not describe the control.
The control does not apply to this product context.
Eligible sources conflict about the control or its current behavior.
The available evidence was not enough to establish a state by the cutoff.