ELLIPAL X Card:
a higher-certified chip than ELLIPAL's own flagship, running on firmware you can't inspect.
We tore apart ELLIPAL's credit-card-sized NFC cold wallet across seven weighted categories; from a CC EAL6+ secure element that's actually higher-certified than ELLIPAL's own pricier Titan 2.0, a genuinely thoughtful offline setup device with a real anti-tamper self-destruct mechanism, and broad support for 10,000-plus tokens, to real, independently-confirmed closed-source firmware and the same structural lack of native multisig found across ELLIPAL's whole lineup; and landed on a score the marketing page won't show you.
Our take, up front: the X Card is ELLIPAL's newest, cheapest hardware wallet, and it carries a genuinely counterintuitive real fact: its CC EAL6+ secure element is certified to a higher tier than the chip in ELLIPAL's own pricier Titan 2.0 and Titan Mini, both of which use EAL5+. Setup runs through a separate device, the X Card Starter, purpose-built with no internet connectivity, no data storage, and a genuine anti-tamper self-destruct mechanism, specifically to protect the offline key-generation moment. Day to day, the card signs by NFC tap alone, no cable, no Bluetooth, no screen. Real, broad support for 10,000-plus tokens across 40-plus blockchains, plus standard BIP39 backup portability, round out a genuinely strong spec sheet. What we can't set aside: multiple independent sources explicitly confirm the firmware here is closed-source, a real transparency gap compared to fully open competitors we've reviewed elsewhere in this series, and ELLIPAL's whole lineup, including this card, lacks native multisig support. We weighted all of it below.
The X Card runs a CC EAL6+ certified secure element, and one detailed independent source specifically confirms this is a higher certification tier than the EAL5+ chip used in ELLIPAL's own pricier Titan 2.0 and Titan Mini. Setup happens entirely offline through a separate device, the X Card Starter, purpose-built for that single moment: no internet connectivity, no data storage, a fully anti-tamper design, and a genuine self-destruct mechanism if physical intrusion is detected. Day-to-day signing is fully air-gapped, NFC tap only, with no USB or Bluetooth connection at all. Standard BIP39 seed phrase support means your backup restores on any compatible wallet from any brand, a real, meaningful portability feature. We found no disclosed vulnerability or security incident specific to this device in our research. Set against this: multiple independent sources explicitly confirm the firmware here is closed-source, meaning the security architecture rests on trust in ELLIPAL rather than independent code verification, and ELLIPAL's entire current lineup, including this card, lacks native multisig support.
Pros
- CC EAL6+ secure element, certified higher than ELLIPAL's own pricier Titan 2.0
- Dedicated offline setup device (X Card Starter) with genuine anti-tamper self-destruct protection
- No disclosed vulnerability or security incident found in our research
Cons
- Closed-source firmware cannot be independently verified
- No native multisig support across ELLIPAL's entire current lineup
The X Card supports 40-plus blockchains, 50-plus stablecoins, and 10,000-plus tokens, genuinely one of the broadest coverages in this entire series. Standard BIP39 seed phrase compatibility means your recovery phrase works with any compatible wallet, not just ELLIPAL's own ecosystem, a real, meaningful interoperability advantage.
Pros
- 10,000-plus supported tokens across 40-plus blockchains
- Standard BIP39 backup restores on any compatible wallet, not just ELLIPAL's own
Cons
- None significant found in our research
Setup is genuinely fast, independently confirmed as accurate in practice at roughly 1 to 3 minutes. Tap-to-sign NFC is a real, simple day-to-day signing flow with no cables or pairing required. But the card has no screen at all, so transaction verification depends entirely on the ELLIPAL phone app, and the device relies entirely on that app for operation; while keys remain secure during any app downtime, functionality would be limited, a real, honestly-disclosed dependency.
Pros
- Genuinely fast setup, independently confirmed at roughly 1-3 minutes
- Simple, cable-free NFC tap-to-sign daily use
Cons
- No on-device screen; transaction verification depends entirely on the phone app
- Real, disclosed dependency on app availability for functionality
At 1.2mm thick, this is a genuinely slim, credit-card-sized form factor with no battery to degrade over time. The separate X Card Starter, used specifically for setup, features a real, distinctive anti-tamper design with a self-destruct mechanism. A one-year warranty is included.
Pros
- Genuinely slim (1.2mm), battery-free card design
- X Card Starter includes a real anti-tamper self-destruct mechanism
- One-year warranty included
Cons
- None significant found in our research
ELLIPAL is an established company with a real track record through its Titan series, reporting over $10 billion in managed user assets and no history of being hacked, both self-reported claims we treat accordingly rather than as independently verified. Genuinely notable: ELLIPAL's own review content includes real, candid risk disclosure, explicitly stating that no self-custody setup eliminates every risk, and that NFC cold wallets close remote theft paths without eliminating physical, supply-chain, firmware, or social-engineering risks, a responsibly honest communication style. A one-year warranty and online help-center support are real, standard offerings. No disclosed security incident was found in our research.
Pros
- No disclosed security incident found in our research
- Unusually candid, honest risk disclosure directly from the company
Cons
- Scale and "never hacked" claims are self-reported rather than independently verified
At $69 (early-bird pricing; regular price $79), this delivers a higher-certified secure element than ELLIPAL's own pricier Titan 2.0, broad asset support, and a distinctive offline-setup security architecture at a genuinely reasonable price. A 3-card pack offers better per-unit value for backup or segmentation purposes.
Pros
- Higher-certified secure element than ELLIPAL's own pricier Titan 2.0, at a lower price
- 3-card packs offer better per-unit value for backups
Cons
- None significant found in our research
Support for up to 10 cards with independent PINs is a real, distinctive multi-card backup and segmentation feature. The ELLIPAL app adds real staking, swap, and fiat on/off-ramp functionality. Real, structural limitation: ELLIPAL's entire current lineup, including this card, lacks native multisig support, a genuine gap relative to richer competitors in this category.
Pros
- Up to 10 independently-PIN-protected cards for backup and segmentation
- Real staking, swap, and fiat on/off-ramp functionality in the companion app
Cons
- No native multisig support across ELLIPAL's entire lineup
Buy only through ELLIPAL's official store.
Third-party marketplace listings are a real, documented vector for tampered devices. At least one detailed source specifically warns that a device compromised before setup would undermine security from the very first use.
A genuinely thoughtful design, asking you to trust code you can't inspect.
The X Card's actual engineering is real and worth taking seriously: a higher-certified secure element than ELLIPAL's own flagship, a dedicated offline setup device with genuine anti-tamper protection, and a slim, battery-free form factor that delivers on its portability promise. Broad token support and standard BIP39 backup portability round out a genuinely strong spec sheet for the price. What keeps this from scoring alongside the fully-open competitors we've reviewed is straightforward: the firmware is closed, so every security claim here rests on trusting ELLIPAL rather than independently checking the code, and the whole lineup still lacks native multisig. Neither is a dealbreaker on its own, but together they're a real, honest reason this doesn't top the category.
The scorecard above is deliberately general. Whether the ELLIPAL X Card is right for you depends heavily on which of these you already are.
The portability-first buyer who wants a slim, always-carryable cold wallet
A 1.2mm, battery-free credit-card form factor with genuine EAL6+ security is a real, distinctive fit if a bulkier device would just stay in a drawer.
The multi-chain holder who wants broad token support at a low price
10,000-plus supported tokens across 40-plus blockchains at $69 is genuinely strong coverage for the price point.
The buyer who wants multiple independent backup cards
Support for up to 10 cards with independent PINs offers real, flexible segmentation options for savings, spending, or shared access.
Anyone who specifically requires open-source firmware or native multisig
The closed-source firmware and lineup-wide lack of multisig support are real, disqualifying factors if either is a hard requirement for you.
The scorecard covers the headline judgment calls. These four tables cover the specifics we didn't want to bury in prose; how the two-part Card/Starter system actually works, the certification inversion across ELLIPAL's own lineup, a real, cited breakdown from one detailed review, and how it compares against the other wallets we've reviewed.
The X Card and the X Card Starter: two different devices
| X Card | X Card Starter | |
|---|---|---|
| Used for | Day-to-day tap-to-sign transactions | One-time offline setup and key generation only |
| Connectivity | NFC only | None; no internet connectivity at all |
| Data storage | Secure element only | None |
| Tamper protection | Standard secure element protections | Anti-tamper design with a self-destruct mechanism |
You need the Starter once, for setup and recovery; after that, the card alone handles daily signing via NFC tap.
The certification inversion across ELLIPAL's lineup
| Device | Price | Secure element |
|---|---|---|
| X Card | $69-$79 | CC EAL6+ (higher) |
| Titan Mini | ~$79 | CC EAL5+ |
| Titan 2.0 | ~$169 | CC EAL5+ |
ELLIPAL's newest, cheapest card carries a higher-certified secure element than either of the company's own pricier Titan devices, a real, notable inversion similar to a pattern we've found elsewhere in this series.
One detailed review's category breakdown
| Category (Coin Bureau's own rubric) | Score |
|---|---|
| Security Architecture | 4.8 / 5 |
| Asset and Chain Support | 4.8 / 5 |
| Setup and Recovery | 4.7 / 5 |
| Value for Money | 4.8 / 5 |
| User Experience | 4.7 / 5 |
| Transaction Review Experience | 4.6 / 5 |
These are that outlet's own categories, not directly mapped to ours, but they reflect a genuinely, consistently positive independent assessment worth citing directly.
How it compares to other hardware wallets we've reviewed
| Wallet | Firmware | Screen | Price | Notable trade-off |
|---|---|---|---|---|
| ELLIPAL X Card | Closed-source | None | $69-$79 | No native multisig; firmware not independently verifiable |
| Tangem Wallet | Closed-source (card firmware) | None | $54.90-$69.90 | Unpatchable disclosed laser attack |
| Keystone 3 Pro | Open-source | Yes (4") | $149 | Two-scan QR workflow; no native staking |
| SafePal S1 | Closed-source | Yes (1.3") | $49.99 | Apparently unresolved GPL violation |
Among the screenless card-style wallets in this series, the X Card's higher-certified chip and broader asset support stand out, though closed-source firmware remains a shared limitation with Tangem.
We don't just want to hand you our number; we want to show you how it sits next to what other review desks and comparison sites have published. Worth flagging directly: ELLIPAL's own blog publishes a detailed, favorable review of its own product, which we've treated as a self-promotional source rather than an independent one, consistent with how we've handled other companies' own marketing content elsewhere in this series.
Our score lands meaningfully below the aggregated industry average, including one real, specifically-cited source with very high category ratings. Most coverage leads with the genuinely impressive certification and spec sheet without weighting the closed-source firmware or the lack of native multisig as heavily as we do.
| Source | Score | Type |
|---|
Scores compiled by our editorial team from publicly available reviews as of August 2026. "Editorial estimate" means the outlet didn't publish a single numeric score, so we converted their published verdict and sentiment into a comparable 100-point figure. Verify current figures directly with each source before citing them elsewhere.
You need the Starter once, for initial offline setup and key generation, and again if you ever need to recover the wallet. Day-to-day signing afterward only requires the card itself, tapped against your phone.
At the certification level, yes. The X Card's secure element is certified CC EAL6+, while both the Titan 2.0 and Titan Mini use the lower CC EAL5+ chip, confirmed by at least one detailed independent source.
No. Multiple independent sources explicitly confirm the firmware is closed-source, meaning it can't be independently verified the way fully open-source competitors' firmware can.
No, the card itself has no screen at all. Transaction verification happens entirely through the ELLIPAL phone app before you tap to sign.
Yes, the system supports up to 10 cards with independent PINs, useful for backups or segmenting funds across different purposes.
No. ELLIPAL's entire current lineup, including the X Card, lacks native multisig capability, a real, structural limitation compared to competitors that offer it.
Your private keys remain secure regardless of app issues, since they never leave the card's secure element. However, functionality would be limited during any app downtime, since the card relies entirely on the app for operation.
Only through ELLIPAL's own official store. At least one detailed source specifically warns that a device compromised before setup through an unofficial channel would undermine security from the very first use.
More Reviews
BitBox02 – Hardware Wallet Review
Score: 71/100. Swiss-made, open-source, and genuinely clever, but sources disagree on whether multisig still works.
Read More
Ledger Flex – Hardware Wallet Review
Score: 76/100. Best chip Ledger makes, but closed-source firmware, the Recover controversy, and two breaches still linger.
Read More
NGrave Zero – Hardware Wallet Review
Score: 62/100. The "EAL7 wallet" is real, but the actual secure element underneath is a lower EAL5+ chip.
Read More
Trezor Safe 7 – Hardware Wallet Review
Score: 78/100. Fully auditable TROPIC01 chip, undercut by a real Ledger Donjon laser fault-injection disclosure.
Read More