NGRAVE vs Safe

The core of the NGRAVE ecosystem is the ZERO, a dedicated touchscreen hardware device designed for complete physical and cryptographic isolation. It pairs with the companion LIQUID mobile application available on iOS and Android. Rather than connecting directly to an internet-enabled host via cables or wireless signals, the ZERO communicates exclusively by scanning dynamic QR codes displayed on the companion app and generating matching optical responses on its 4-inch color capacitive touchscreen.

Key creation on the device relies on the proprietary Perfect Key generation process, combining environmental light sensors, biometrics, device-generated randomness, and user interaction to generate private keys on-device without exposing them to networked memory. The system supports foundational layer-one blockchains including Bitcoin, Ethereum, MultiversX, Polygon, Binance Smart Chain, Solana, and major ERC-20 tokens, alongside integration with popular EVM smart contracts. While its direct native chain selection is curated compared to open-platform USB devices that support thousands of experimental tokens, the core asset coverage addresses the vast majority of institutional and private cold storage holdings.

Safe functions as a programmable smart contract wallet rather than a standard externally owned account. Instead of relying on a single private seed phrase, each Safe is an on-chain smart contract deployed directly on an EVM-compatible network. The platform supports native tokens and standard ERC token types across Ethereum, Arbitrum, Optimism, Polygon, Base, BNB Chain, and Avalanche. Assets held in the wallet remain directly governed by the contract rules and access parameters established at creation, providing complete custody clarity for institutional and personal users.

Because Safe operates as account abstraction infrastructure, it processes standard transfers alongside intricate decentralized finance interactions. Through the Safe Apps interface, teams can connect directly to decentralized exchanges, lending markets, and governance platforms without exposing individual signer keys to untrusted web environments. The modular architecture also allows administrators to attach custom modules, such as automated recurring payroll streaming, recovery guards, or allowance plugins, without sacrificing overall threshold integrity. This extensibility allows the wallet to adapt smoothly to evolving treasury operations.

Acquiring the NGRAVE ecosystem involves an upfront hardware purchase rather than ongoing subscription fees. The standalone NGRAVE ZERO generally retails around 398 EUR, while the complete NGRAVE Combo bundle, which pairs the terminal with the stainless steel GRAPHENE backup plates, retails around 498 EUR. Individual accessories, such as additional lower GRAPHENE plates for multi-wallet backups or protective silicone cases, can be purchased separately to expand vault setups.

Operating the hardware wallet incurs standard blockchain network transaction fees, which are paid directly to miners or validators on the respective network when signing outgoing transactions. NGRAVE does not levy platform surcharges on self-custodial transfers or balance queries. When users choose to interact with third-party integrated fiat on-ramps, decentralized exchanges, or swap aggregators through the LIQUID companion interface, third-party liquidity providers may apply conversion spreads and processing fees. Users retain complete control over transaction parameters, viewing exact signing data and gas allocations on the air-gapped screen prior to authorization.

Safe functions as open-source public good infrastructure with no baseline subscription fees or recurring management charges for individual deployments. Creating a Safe contract requires an initial on-chain deployment fee determined by prevailing gas rates on the destination network. On layer-two scaling networks like Arbitrum or Optimism, deployment expenses remain minimal, whereas mainnet Ethereum deployments fluctuate based on block space congestion. The protocol does not take percentage cuts of stored capital or levy fees on inbound token transfers, ensuring full capital efficiency for long-term holders.

Every transaction generated by a Safe requires gas for execution once the required signer threshold is satisfied. Signers sign cryptographic messages off-chain to approve proposed payloads without incurring gas fees, but the final signer or designated relayer submits the gathered signatures in a single transaction that consumes network gas. Safe facilitates gas abstraction through integrated transaction relayers, allowing accounts to sponsor execution fees or pay gas using selected ERC-20 tokens rather than holding native network currency. This flexibility reduces friction for multisig operations across distributed teams.

Security architecture represents NGRAVE's foundational differentiator. The ZERO operates as a pure air-gapped signing device with no network interface controllers, Bluetooth chips, NFC sensors, or active data lines within its USB-C port, which is engineered strictly for power delivery and secure firmware charging. At the software layer, the device runs on a custom operating system that achieved an EAL7 security certification, representing one of the highest formal verification ratings available for commercial electronic custody systems.

Physical defense mechanisms include an internal light sensor and structural tamper-detection layers that wipe sensitive cryptographic material if unauthorized physical enclosure breaches are detected. To guard against paper seed phrase degradation, the GRAPHENE backup system uses high-grade stainless steel plates capable of withstanding temperatures exceeding 1,600 degrees Celsius, water immersion, and physical impacts. Key recovery uses an encrypted hex layout split across two plates, ensuring that an unauthorized individual finding a single plate cannot reconstruct the master private key.

Custody on Safe is purely non-custodial and programmable through automated on-chain validation logic. When setting up an account, administrators define the total number of signer addresses and the specific threshold required to authorize an action, such as two-of-three or four-of-seven configurations. Signer addresses can include hardware wallets, browser extensions, mobile devices, or other independent smart contract accounts. This structural separation prevents any single compromised key from depleting the contract assets or changing fundamental wallet parameters without collaborative approval from designated keyholders.

Security controls extend beyond simple threshold signature counts. Safe includes built-in transaction simulation tools that trace execution outcomes prior to on-chain broadcast, helping signers detect unexpected contract calls and malicious balance alterations. Additionally, organizations can configure fallback recovery handlers, spending allowances for routine operational payments, and custom guard contracts that enforce pre-execution and post-execution checks against organizational treasury policies. These programmatic guardrails helps support that organizations can establish sophisticated corporate governance standards directly within decentralized environment parameters.

Founded in Belgium in 2018, NGRAVE distributes its physical hardware devices across international consumer markets, including North America, the European Union, the Asia-Pacific region, and Latin America. Delivery remains subject to standard local customs regulations, carrier handling procedures, and import tariffs determined by destination jurisdictions. Because NGRAVE operates purely as a hardware manufacturer and non-custodial software developer, customers retain exclusive control over their cryptographic private keys. Purchasing or operating the standalone hardware does not require identity verification, customer background checks, or personal registry filings. This model helps support users maintain direct sovereignty over their asset management workflows without ongoing custodial account oversight.

Customer assistance is provided through an indexed technical knowledge base, step-by-step documentation, a web ticketing portal, and active community discussion forums. The support materials provide structured walkthroughs for device initialization, biometric configuration, isolated firmware maintenance, and mechanical GRAPHENE punch-card stamping. Firmware update files are distributed via cryptographically signed packages that require direct offline verification on the device before application. The support desk handles hardware warranty queries, defective unit troubleshooting, and order fulfillment tracking during standard European business operating hours. Users can access detailed self-serve guides covering cold recovery drills and companion mobile application syncing around the clock.

Safe infrastructure is deployed globally on public decentralized networks, allowing anyone with an internet connection to interact with the underlying smart contracts directly or via open web and mobile interfaces. The open-source code base is maintained under public repositories, enabling developers to run self-hosted front ends or construct proprietary user interfaces against the Safe Core API. Because Safe operates purely as non-custodial software, it does not hold customer funds or enforce centralized geographic onboarding restrictions. Anyone capable of signing transactions on supported EVM networks can establish accounts without identity verification steps or regional platform exclusions.

Governance of the underlying protocol is stewarded through the SafeDAO community and the SAFE token framework. Token holders propose and vote on technical upgrades, treasury resource distribution, and ecosystem grants that expand the broader smart contract ecosystem. Customer support operates primarily through public community forums, technical developer documentation, and decentralized support channels rather than centralized ticketing desks. Users manage their own operational recovery plans, meaning internal organizational discipline and reliable multi-signer communication channels are critical to maintaining continuous treasury accessibility.

While the NGRAVE ZERO incorporates high-grade hardware protections, non-custodial ownership places ultimate operational accountability on the asset holder. The internal light-tamper detection mechanism triggers an automatic cryptographic wipe if the outer chassis is breached, requiring a valid GRAPHENE or mnemonic backup to recover funds. The two-part GRAPHENE configuration mitigates single-location theft risks, but users must store each plate in geographically separated vaults to preserve safety. In addition, air-gapped QR code communication prevents remote network interception, yet users must carefully verify destination addresses and transaction values on the terminal touchscreen before approving transfers. Physical device damage, liquid exposure, or loss of both recovery plates will result in permanent capital loss without central account recovery options.

While Safe contracts undergo extensive independent formal verification and long-standing audit reviews across major deployments, interacting with smart contracts always entails underlying protocol risk. Safe accounts cannot be recovered by third-party support teams if signers lose access below the minimum designated confirmation threshold. Operational risks also include malicious signing requests, making strict internal signer verification routines and transaction simulation reviews necessary prior to execution. Organizations must establish clear communication protocols outside of on-chain channels to verify proposed transaction payloads and maintain backup signer devices in secure, geographically dispersed locations.