Get Ambire

The Hardware Wallet Built For Safe

Reserve my Ice

First batch limited to 200 devices! Save your spot.

  • Post-quantum
    ready
  • Private and
    open source
  • Perfect clear
    signing
  • Air gap
    switch

Images for illustrative purpose.
Final version may vary in shape and color.

Why it matters

Do you really trust your cold wallet?

  • Blind signing

    $1.4B

    Bybit, Feb 2025. Signers approved a Safe transaction their hardware wallets could not decode; it was a DELEGATECALL.

  • Weak randomness

    ~$120M

    Coldcard, Jul 2026. A build bug generated seeds from a weak random-number generator.

  • Supply-chain attack

    $72–93M

    Ledger reseller implant, Sep–Oct 2026. An LTE implant was hidden under the screen; the tell was a visible wire.

Ambire Ice is built different

  • It decodes the Safe transaction on the device.
  • Creates keys inside certified chips.
  • And puts the whole board on display.

The solution

The best a hardware wallet can ever be

  • The Safe signer you need

    Works as a Safe signer over USB, Bluetooth or QR, out of the box.

  • Private and open source

    Open hardware and firmware. Anyone can inspect it, and anyone can build one.

  • Post-quantum ready

    Add a post-quantum key to your Safe as soon as chains support it.

  • Perfect clear signing

    See exactly what you sign: every Safe action, decoded on the device.

  • Built on Trezor firmware

    Open source and battle-tested for over a decade.

Choose your style

Images for illustrative purpose. Final version may vary in shape and color.

Pre-order your Ice

Pre-order today at a special price for first 200 devices only

$159$119

Reserve yours with a $10 deposit

Delivery expected in 2-3 months

Clear signing

What you see is what you sign

  • Ice screen asking to sign a two-action Safe multisend

    Every action, decoded. The device rebuilds the Safe transaction itself and spells out each step of a batch, so what you see is what you sign.

  • Ice screen blocking an unknown DELEGATECALL

    The Bybit attack, stopped. Handing the Safe's control to unknown code is blocked unless the target is on a short allowlist.

Offline at the flip of a switch

The airgap switch cuts the USB data lines and the radio's power, which turns off the BLE radio and its light
The airgap switch cuts the USB data lines and the radio's power, which turns off the BLE radio and its light

One switch, fully offline.

It cuts USB data and the radio's power in hardware, not software. The light is wired to the radio itself, so it cannot lie. Offline, the device signs over animated QR codes in both directions.

Built to be looked at

  • About the size of a credit card, with every part visible through a fully transparent case.

  • Carefully designed and audited in-house: Every board passes a full test run before it ships.

  • Made with precision by machines. Only the screen, camera, and case are assembled by hand.

Ambire Ice taken apart: the transparent case, the screen and the board

Images for illustrative purpose.
Final version may vary in shape and color.

Build your own

Ice is not only open-source and transparent, but also available for you to build it on your own. You will find every file needed: the board, ready for JLCPCB or PCBWay, and a case you can print at home.

Ambire Ice in its see-through case, showing a Safe transaction to sign
Download files