Cypherock
Best for verifiable firmware openness
How it rates
- Firmware source published in a public repository
- Device security or specification page published
- Technical documentation reachable without an account
- No dedicated security or audit disclosure identified at this check
- Terms page not found at the conventional address at this check
Each indicator scores 2, 1 or 0. A pillar is the points earned over the points available; the overall score is the weighted sum. Every source below is public — check any of them yourself.
- MetFirmware source published in a public repository
Vendor repository reachable at this check.
github.com/Cypherock - MetDevice security or specification page published
Security or specification page reachable at this check.
www.cypherock.com/product/cypherock-x1 - Not metIndependent security research or audit programme published
No published security research or audit programme identified at this check.
- MetTechnical documentation reachable without an account
Documentation open at this check.
www.cypherock.com/product/cypherock-x1 - MetVendor organisation identifiable from the repository
Repository published under the vendor organisation (Cypherock).
github.com/Cypherock
- Met
- MetModel-specific product page public
Model page reachable at this check.
www.cypherock.com/product/cypherock-x1 - Not metLegal or terms page public
Not found at the conventional address at this check.
- Met
- MetPurchase information viewable without an account
No account required to reach the shop at this check.
www.cypherock.com/
- Met
- Met
- Met
- MetDocumentation site separate from marketing
Dedicated documentation or support resource published.
www.cypherock.com/product/cypherock-x1 - MetSecurity posture stated publicly
Security claims published on a reachable page.
www.cypherock.com/product/cypherock-x1
- Met
- Met
- Not metSecurity or disclosure page published
Not identified at this check.
- Not metTerms or legal documentation published
Not found at the conventional address at this check.
- MetProduct range documented publicly
Product information published.
www.cypherock.com/product/cypherock-x1
- Met
- Met
- Met
- Met
- Not metLegal documentation reachable
Not found at the conventional address at this check.
A seedless wallet splitting the key across a vault and four NFC cards under a 2-of-5 threshold, designed around recovery and inheritance rather than storage.
Our assessment
Cypherock X1 removes the seed phrase from normal use. The secret is split into five shares across the X1 Vault and four NFC cards using a 2-of-5 Shamir scheme, so any two components can recover the wallet and no single object is worth stealing on its own.
Attacking the failure that actually happens
Almost nobody loses crypto to a broken secure element. People lose it to a misplaced seed phrase, a water-damaged sheet of paper, a photograph in a cloud backup, or a relative who cannot find anything after a death. Distributing shares across five objects turns a single point of failure into a threshold, which is the right shape for the risk that is real.
How signing works
Tapping any one card to the vault reconstructs the key in volatile memory for the duration of the operation, after which it is gone. Seed export remains available for migration and estate planning, so you are not locked into the vendor's format — an important detail that some seedless designs get wrong.
Independent review, no known break
A Keylabs audit examined the architecture and found it sound, and no successful attack on the security model has been publicly reported. As with every device in this category, that is an absence of known failures rather than proof of safety.
Who it suits
Cypherock fits holders who want inheritance and recovery planning built into the device rather than improvised on paper, and who can store four cards in genuinely separate places. Buyers who want a conventional single-device workflow with a written backup will find Trezor or BitBox simpler.
How rivals compare
| Service | Score | Best for | |
|---|---|---|---|
| Trezor | 9.9 | verifiable firmware openness | Read → |
Frequently asked
Does this score mean Cypherock is secure?
No. It measures what a buyer can verify before purchase: published firmware source, documented security claims, and open documentation. Physical security is not tested by us and is not scored.
Why does firmware openness matter so much here?
It is the one substantive security property an outsider can check without specialist equipment. Everything else on a hardware wallet requires trusting the vendor or a third-party teardown.
What would raise this score?
Publishing firmware source, a dedicated security or audit page, and open technical documentation at stable public addresses — all of which are checkable by anyone.