To the main

The 2026 Hardware Wallet Landscape

The hardware and cold wallet market stood at an estimated $0.54–0.73 billion in 2025/2026. Installed bases vary by brand claims: Ledger reported more than 8 million devices sold, Trezor surpassed 2 million users, and Tangem cited between 1 million and over 3 million devices deployed. Coldcard and Ellipal did not publish comparable public totals in the same period.

Price competition intensified when Trezor cut Safe 3 and Safe 5 pricing in January 2026 while leaving features unchanged. A more serious development occurred between July and August 2026, when an exploit tied to a March 2021 Coldcard firmware RNG flaw drained 1,816 BTC from over 5,200 addresses. Coinkite released a hotfix and seed-migration guidance. The event affected only Coldcard users yet prompted broader scrutiny of firmware RNG quality across air-gapped and connected devices alike. Ellipal continued to promote its QR and NFC air-gapped lines, while Tangem expanded its NFC card and ring options. These events illustrate a market that is growing in size and diversity yet remains sensitive to implementation details in seed generation and update processes.

Form Factors and Connectivity Options

Tangem devices take the form of credit-card-sized NFC cards or wearable rings built around Samsung EAL6+ secure elements. Signing occurs entirely through a mobile app over NFC, with no ports or cables required.

Ledger Nano, Flex and Stax models combine USB-C ports with Bluetooth radios. On-device screens allow transaction verification before any wireless or wired connection is used.

Trezor Safe series hardware ships with USB-C connectors; the flagship Safe 7 adds optional Bluetooth. Touch or physical buttons on color or monochrome screens let users confirm operations directly on the device.

Coldcard Mk4, Mk5 and Q units remain fully air-gapped. They accept microSD cards, QR codes, NFC or a built-in keypad for data transfer while keeping the private keys offline at all times.

Ellipal Titan and Mini wallets use a sealed metal body with a 4-inch touchscreen and rely on QR codes for air-gapped communication. The separate Ellipal X Card is a battery-free NFC token that pairs with the same app ecosystem.

These physical and connectivity choices determine how each wallet balances convenience against isolation from online threats.

Security Architectures and Seed Handling

Secure-element ratings vary across the devices. Tangem uses Samsung EAL6+ chips. Ledger employs EAL5+ or higher elements. Trezor’s newer models feature EAL6+ components. Coldcard deploys dual or multiple secure elements sourced from different vendors. Ellipal does not publish a specific rating in available data.

Firmware openness differs sharply. Trezor runs fully open-source firmware. Coldcard provides verifiable and open-source firmware. Ledger, Tangem, and Ellipal keep firmware closed or partially closed, limiting independent audits.

Backup methods reflect these design choices. Tangem supports optional seedless multi-card backups that rely on additional physical cards paired with the mobile app. Trezor emphasizes passphrase protection combined with multi-share (Shamir) backups. Coldcard offers advanced duress features including trick PINs and brick modes that can destroy the device under threat. Ellipal follows standard BIP39 seed phrases. Ledger uses its standard seed-plus-passphrase approach with on-device confirmation.

Air-gapping approaches also diverge. Coldcard and Ellipal prioritize full air-gapped operation, with Coldcard supporting microSD, QR, and NFC transfers while Ellipal relies on QR codes. Trezor and Ledger devices connect via USB-C or Bluetooth, requiring users to verify transactions on-screen to mitigate risks. Tangem’s NFC signing keeps the private key on the card but still depends on the companion app for most operations.

A 2021 firmware RNG flaw in Coldcard devices led to a major exploit in July–August 2026, draining approximately 1,816 BTC from over 5,200 addresses, according to the TRM Labs report dated August 5, 2026. Coinkite released a hotfix and seed-migration guidance after the incident.

Pricing and Asset Support Comparison

BrandEntry-Level Price (2026)Higher ModelsSupported Networks / Assets
Tangem$54–$54.90 (2-card pack)$69.90 (3-card pack)85–91+ networks, 14,100+ tokens
Ledger$69–$79 (Nano S Plus)$149 (Nano X), $179–$399 (Stax/Flex/Gen5)Dozens of networks, 5,000–15,000+ assets
Trezor$59 (Safe 3, reduced Jan 2026)$129 (Safe 5), $249 (Safe 7)Thousands of assets (9,000+ reported)
Coldcard~$169.94–$219 (Mk5)~$249–$319 (Q)Bitcoin-only
Ellipal~$66.95–$67 (X Card)$149 (Titan 2.0)45+ blockchains, 10,000+ tokens

Prices reflect official and retailer listings gathered 22 September 2026. Tangem and Ellipal figures come from direct product pages; Ledger and Trezor values incorporate announced reductions and shop data. Coldcard pricing spans multiple 2026 retailer sources.

Asset counts vary by exact definition of “supported.” Tangem sources list 85–91+ networks while Ledger ranges from 70+ networks to 5,000–15,000+ assets depending on the report. Ellipal states 45+ blockchains, Trezor thousands, and Coldcard remains strictly Bitcoin. These totals shift with firmware and app updates released throughout 2026, so users should verify current compatibility on each manufacturer’s site before purchase.

Ledger reports more than 8 million devices sold, Trezor exceeds 2 million users, and Tangem claims between 1 million and over 3 million devices deployed as of 2026. These figures reflect growing self-custody demand, yet a July 2026 Coldcard exploit that drained 1,816 BTC from over 5,200 addresses highlighted firmware risks even for established brands.

Tangem’s 2026 app updates introduced networks such as Electroneum and Arc alongside cashback features and improved swaps, broadening appeal for users seeking mobile-first access. NFC card and ring designs suit travelers and app-heavy traders who value quick signing without cables. Air-gapped QR or microSD options from Coldcard and Ellipal attract security-focused users wary of Bluetooth or USB exposure. Bitcoin-only Coldcard devices with advanced duress features appeal to maximalists prioritizing narrow, verifiable scope. USB-C and Bluetooth models from Ledger and Trezor fit users managing diverse portfolios across dozens of networks who accept companion apps for convenience.

FAQ

Which wallet fits Bitcoin-only users?

Coldcard models remain the dedicated choice, offering air-gapped QR and microSD options plus duress features such as trick PINs.

What happened in the July 2026 Coldcard incident?

A March 2021 firmware RNG flaw allowed roughly 1,816 BTC, valued near $116 million, to be drained from over 5,200 addresses beginning July 30, according to TRM Labs.

How do affected users migrate after the exploit?

Coinkite issued a hotfix and published seed-migration guidance so owners could move funds to new or updated devices.

Does Tangem require a conventional seed phrase?

No. Tangem cards support optional seedless backup through additional cards paired with the mobile app.

Which brands publish open-source firmware?

Trezor and Coldcard both emphasize verifiable open-source firmware on current models.

Are these wallets suitable for holding many tokens?

Tangem, Ledger, Trezor and Ellipal each support thousands of assets across dozens of networks, while Coldcard stays Bitcoin-only.