The companion app connects to the ERA hardware wallet to add portfolio management, swaps, and dApp access across 14 networks — while private keys never leave the device. The release follows a full independent security audit by Cure53, and lands alongside a major update to ERA Lens, ERA’s on-device scam-warning system, plus new hardware-side capabilities including Bitcoin multisig and on-device 2FA. 

ERA, the maker of the air-gapped ERA hardware wallet, today announced the launch of the ERA Software Wallet, a companion mobile app for iOS and Android that turns its air-gapped hardware device into a full self-custody ecosystem. The move addresses one of the most common trade-offs in crypto self-custody: hardware wallets are secure but often clunky to use day-to-day, while software wallets are convenient but hold keys online.

ERA’s model keeps the two roles separate by design — the phone prepares transactions, the hardware device signs them, and the private keys never touch the phone at all.

“People don’t abandon self-custody because they don’t believe in it – they abandon it because it’s inconvenient,” said Alex Devyatkin, founder and CEO of ERA. “The Software Wallet doesn’t change what secures your assets. It changes how easy it is to actually use that security every day.”

What’s in the ERA Software Wallet

The app gives users a single interface to manage assets across 14 networks – Bitcoin (SegWit, Taproot, and Legacy address types), Ethereum, Solana, Tron, Base, Arbitrum, Optimism, Polygon, BNB Chain, Avalanche, Gnosis, zkSync, Kaia, and Aurora – while every transaction is still confirmed and signed on the ERA hardware device via QR or NFC.

Inside the app, users can:

• View portfolio balances across all supported networks, with each token clearly tagged by network
• Send and receive assets, with a network guard that prevents funds from being sent to the wrong chain
• Buy and sell crypto through integrated providers, with automatic KYC/country detection and side-by-side rate comparison
• Swap and bridge across chains in a single flow, powered by Rango’s routing, with a full quote shown before signing
• Connect to dApps via WalletConnect, with sessions still requiring hardware-signed approval
• Get proactive protection: warnings on unused token approvals, a spam-token filter, alerts on pending or stuck transactions, and full transaction history

App-level security includes PIN and biometric unlock (Face ID / Touch ID / fingerprint), auto-lock when the app is backgrounded, and screen-privacy protections that hide app content from the system app switcher and block screenshots and screen recording.

Backed by an Independent Security Audit

Ahead of launch, ERA commissioned a full white-box security audit from Cure53, a cybersecurity firm with an established track record auditing wallets and crypto infrastructure. Cure53 was given access to source code, builds, documentation, and internal components, and tested the mobile app, API, transaction construction, and QR/BC-UR signing flows. Every finding was fixed by ERA’s team and then retested by Cure53 to confirm the fix held.

The summary and full technical reports are public:

• Summary report (PDF)
• Full pentest report (PDF)

The Headline Device Update: ERA Lens’s New Scam-Warning System

The main update on the device side is to ERA Lens, ERA’s built-in transaction-decoding layer, which translates what a transaction actually does into plain language before signing rather than showing raw hex data.

This release adds a new scam-warning display, expands coverage to more DeFi and bridging protocols (including Rango, imToken, Rabby, MetaMask Portfolio Bridge, Mayan, Squid, LayerSwap, Stargate V2, GasZip, and Magpie), and can now decode newer, harder-to-read transaction formats such as EIP-7702, ERC-7821, and Safe multicalls — flagging unlimited approvals to unfamiliar addresses automatically.

The team also added 37 real transactions drawn from known incidents – including Bybit, WazirX, Radiant, Inferno Drainer, and PREMINT – to its automated test suite, so every new firmware release is checked against these attack patterns before shipping.

Extended Protection, Built Into the App

On the mobile side, the Software Wallet adds extended protection aimed at scams that target wallet users directly rather than the underlying blockchain. The home screen now surfaces a plain-language warning for unused token approvals, with a dedicated screen showing exactly which contract can spend how much of which token, in which network, revocable in one confirmation.

The app also guards against address poisoning — fake transaction records designed to trick users into copying a lookalike address from their own history. Between July 2 and August 1, 2026, ERA tracked 66 such fake entries across 24 poisoned addresses, spanning 8 wallets and 8 networks; if a recipient address is a near-identical copy of one of a user’s own addresses, sending is blocked outright, with no override.

Also New: Progressive Security on the Hardware Device

Alongside the software wallet launch, ERA is rolling out further capabilities to the hardware device itself, continuing its “wallet you never outgrow” model — meaning users can move to more advanced security setups without switching devices.

• Bitcoin multisig support – the ERA device can act as one cosigner in a Bitcoin multisig setup, for example holding one key in a 2-of-3 arrangement, removing any single point of failure.
• On-device two-factor authentication – TOTP authentication codes can now be stored directly on the ERA hardware device, adding a second layer of digital security on the same hardware that protects private keys.
• Device authenticity verification – separately from how transactions are signed, the ERA device can prove it is a genuine, unmodified unit by signing a one-time challenge with a factory-burned key, a check that takes under a minute.

About ERA

ERA (HWLT FZE) is a Dubai-based digital security company building the ERA Wallet ecosystem: an air-gapped hardware wallet, a companion multichain software wallet, and a built-in transaction-protection layer, ERA Lens.

Source: BeInCrypto