Muun Wallet vs NGRAVE

Muun Wallet operates exclusively as a Bitcoin-focused mobile self-custody software application available on iOS and Android operating systems. It does not support alternative cryptocurrencies, layer-one competitors, tokenized assets, or fiat banking balances. The software integrates base-layer Bitcoin scripting with the Lightning Network, presenting a consolidated balance counter that avoids separating funds into distinct on-chain and off-chain account silos.

Transactions operate seamlessly regardless of the counterparty format. Users can scan standard Bitcoin addresses or Lightning invoices directly from the primary interface. Outbound Lightning payments leverage submarine swap protocols executed through integrated swap partners, allowing users to pay off-chain invoices directly from on-chain balances. Similarly, incoming Lightning transfers settle automatically into the multisig address structure, eliminating the traditional requirement to monitor channel capacity, rebalance liquidity, or manage routing nodes manually.

This streamlined asset model suits savers and transactors focused strictly on the Bitcoin ecosystem. However, users seeking exposure to stablecoins, decentralized finance protocols, or multi-asset portfolio management will find the scope strictly limited. The software is intentionally tailored for direct point-of-sale spending, peer-to-peer transfers, and basic personal treasury storage without external decentralized application interaction.

The core of the NGRAVE ecosystem is the ZERO, a dedicated touchscreen hardware device designed for complete physical and cryptographic isolation. It pairs with the companion LIQUID mobile application available on iOS and Android. Rather than connecting directly to an internet-enabled host via cables or wireless signals, the ZERO communicates exclusively by scanning dynamic QR codes displayed on the companion app and generating matching optical responses on its 4-inch color capacitive touchscreen.

Key creation on the device relies on the proprietary Perfect Key generation process, combining environmental light sensors, biometrics, device-generated randomness, and user interaction to generate private keys on-device without exposing them to networked memory. The system supports foundational layer-one blockchains including Bitcoin, Ethereum, MultiversX, Polygon, Binance Smart Chain, Solana, and major ERC-20 tokens, alongside integration with popular EVM smart contracts. While its direct native chain selection is curated compared to open-platform USB devices that support thousands of experimental tokens, the core asset coverage addresses the vast majority of institutional and private cold storage holdings.

Muun Wallet is open-source software and does not impose proprietary subscription fees, download charges, or wallet creation tariffs. However, all outbound operations incur network settlement expenses determined by market mempool conditions and the underlying swap infrastructure. The software calculates dynamic miner fees based on real-time transaction sizes and estimated block confirmation targets.

Because Muun uses a 2-of-2 multisignature script structure, standard on-chain transactions are larger in virtual byte size than basic native SegWit single-signature spends. Consequently, base layer network costs can be slightly higher than those seen on standard single-key mobile wallets. Outgoing Lightning Network payments introduce additional financial considerations: because they execute via submarine swaps, each off-chain transaction involves an on-chain component alongside swap provider routing fees.

When Bitcoin mempool activity spikes, the fixed on-chain overhead of a submarine swap can make sending small Lightning microtransactions uneconomical relative to native off-chain routing wallets. The interface presents transparent cost breakdowns before final payment confirmation, allowing users to adjust transaction speed targets across slow, medium, and fast tiers. Outbound fund transfers remain fully liquid, but users must exercise discretion regarding network conditions when executing routine low-value payments.

Acquiring the NGRAVE ecosystem involves an upfront hardware purchase rather than ongoing subscription fees. The standalone NGRAVE ZERO generally retails around 398 EUR, while the complete NGRAVE Combo bundle, which pairs the terminal with the stainless steel GRAPHENE backup plates, retails around 498 EUR. Individual accessories, such as additional lower GRAPHENE plates for multi-wallet backups or protective silicone cases, can be purchased separately to expand vault setups.

Operating the hardware wallet incurs standard blockchain network transaction fees, which are paid directly to miners or validators on the respective network when signing outgoing transactions. NGRAVE does not levy platform surcharges on self-custodial transfers or balance queries. When users choose to interact with third-party integrated fiat on-ramps, decentralized exchanges, or swap aggregators through the LIQUID companion interface, third-party liquidity providers may apply conversion spreads and processing fees. Users retain complete control over transaction parameters, viewing exact signing data and gas allocations on the air-gapped screen prior to authorization.

Muun implements a non-custodial 2-of-2 multisignature security model designed to eliminate single points of failure. The user holds one private key directly on their mobile device inside secure hardware storage modules, while the Muun backend server maintains a second co-signing key. Spends initiated through the live application require signatures from both keys, ensuring that neither the provider alone nor an unauthorized third party with isolated server access can move funds.

Rather than utilizing a standard 12-word or 24-word BIP39 seed phrase during initial account creation, Muun employs a three-part recovery framework. Users configure an encrypted cloud backup, establish an email-linked recovery pathway, and generate a printable PDF Emergency Kit. The Emergency Kit contains the user private key alongside the server co-signing key, both protected by a randomly generated recovery code.

In the event that the service provider ceases operations or becomes unreachable, the Emergency Kit includes open-source recovery scripts. These offline tools allow users to reconstruct both private keys and broadcast standard transactions directly to the Bitcoin network without contacting Muun servers. This framework protects user autonomy, though it places total responsibility on the user to preserve their Emergency Kit document and unique recovery passphrase safely offline.

Security architecture represents NGRAVE's foundational differentiator. The ZERO operates as a pure air-gapped signing device with no network interface controllers, Bluetooth chips, NFC sensors, or active data lines within its USB-C port, which is engineered strictly for power delivery and secure firmware charging. At the software layer, the device runs on a custom operating system that achieved an EAL7 security certification, representing one of the highest formal verification ratings available for commercial electronic custody systems.

Physical defense mechanisms include an internal light sensor and structural tamper-detection layers that wipe sensitive cryptographic material if unauthorized physical enclosure breaches are detected. To guard against paper seed phrase degradation, the GRAPHENE backup system uses high-grade stainless steel plates capable of withstanding temperatures exceeding 1,600 degrees Celsius, water immersion, and physical impacts. Key recovery uses an encrypted hex layout split across two plates, ensuring that an unauthorized individual finding a single plate cannot reconstruct the master private key.

Muun Wallet operates globally and does not impose geographic residence restrictions or know-your-customer verification procedures. Because the software functions as a self-custodial key management client, users can install the application, generate addresses, and receive funds without submitting identity documents, phone numbers, or residential proofs. Regional availability is subject primarily to standard Apple App Store and Google Play Store distribution policies.

Operational support is structured around digital self-service resources and direct email assistance. The official website hosts documentation detailing transaction confirmation workflows, fee optimization strategies, and recovery script execution. Users experiencing stuck transactions or synchronization issues can submit technical logs directly through the mobile interface to the developer support team.

While customer service representatives can assist with application troubleshooting and transaction status interpretation, they have no technical capacity to reverse blockchain transactions, reset lost recovery codes, or unlock accounts without user-held keys. Users must maintain personal custody discipline, as lost recovery materials cannot be bypassed or overridden by support personnel under any circumstances.

Founded in Belgium in 2018, NGRAVE distributes its physical hardware devices across international consumer markets, including North America, the European Union, the Asia-Pacific region, and Latin America. Delivery remains subject to standard local customs regulations, carrier handling procedures, and import tariffs determined by destination jurisdictions. Because NGRAVE operates purely as a hardware manufacturer and non-custodial software developer, customers retain exclusive control over their cryptographic private keys. Purchasing or operating the standalone hardware does not require identity verification, customer background checks, or personal registry filings. This model helps support users maintain direct sovereignty over their asset management workflows without ongoing custodial account oversight.

Customer assistance is provided through an indexed technical knowledge base, step-by-step documentation, a web ticketing portal, and active community discussion forums. The support materials provide structured walkthroughs for device initialization, biometric configuration, isolated firmware maintenance, and mechanical GRAPHENE punch-card stamping. Firmware update files are distributed via cryptographically signed packages that require direct offline verification on the device before application. The support desk handles hardware warranty queries, defective unit troubleshooting, and order fulfillment tracking during standard European business operating hours. Users can access detailed self-serve guides covering cold recovery drills and companion mobile application syncing around the clock.

The security architecture of Muun balances user convenience with cryptographic helps protect. The 2-of-2 multisig design helps support that a compromise of the mobile device alone is insufficient to move funds unless the attacker also compromises the associated server-side session or the user recovery code. Furthermore, biometric authentication can lock daily application access locally.

However, technical boundaries exist regarding backup procedures. If a user loses access to their mobile device and simultaneously misplaces their Emergency Kit PDF or recovery code, fund recovery is mathematically impossible. The non-custodial structure helps support complete ownership, but recovery tools cannot bypass forgotten recovery passphrases.

While the NGRAVE ZERO incorporates high-grade hardware protections, non-custodial ownership places ultimate operational accountability on the asset holder. The internal light-tamper detection mechanism triggers an automatic cryptographic wipe if the outer chassis is breached, requiring a valid GRAPHENE or mnemonic backup to recover funds. The two-part GRAPHENE configuration mitigates single-location theft risks, but users must store each plate in geographically separated vaults to preserve safety. In addition, air-gapped QR code communication prevents remote network interception, yet users must carefully verify destination addresses and transaction values on the terminal touchscreen before approving transfers. Physical device damage, liquid exposure, or loss of both recovery plates will result in permanent capital loss without central account recovery options.