SafePal S1:
$49.99 for a fully air-gapped design, and a five-year-old open-source promise still unkept.

The S1 uses a certified EAL6+ secure element with tamper-detection sensors, inside a fully air-gapped design: no Bluetooth, WiFi, NFC, or USB data connection exists at all, only a QR-code signing workflow between the device's camera, screen, and your phone. In February 2021, Kraken Security Labs published a detailed, adversarial security disclosure. The genuinely reassuring part: despite "multiple attempts and angles," Kraken was not able to steal cryptocurrency or extract the seed from the core secure element. The more concerning parts: Kraken demonstrated a working firmware downgrade attack, flashing the device back to an older, potentially vulnerable firmware version without detection, which SafePal subsequently patched in firmware v1.0.24; and Kraken bypassed the device's tamper-detection mechanism by removing an RF shield, which SafePal disputes is a core security feature, characterizing it instead as a component required for electromagnetic compliance rather than security. The most serious, lingering issue: the device contains GPL-licensed open-source components (U-Boot and the Linux kernel) that legally obligate SafePal to release corresponding source code on request; SafePal refused Kraken's request in 2021, stated it intended to release the code that year, and an independent source reconfirmed as recently as December 2025 that this violation remains unresolved nearly five years later.

The S1 supports 200-plus blockchains, with NFT, DeFi, and DApp access available directly through the SafePal App, genuinely competitive coverage for a device at this price point.

The QR-code workflow, build a transaction on your phone, scan it to the device, verify on-screen, sign, scan the signed result back, is a real, functional air-gapped interaction method. But at least one detailed reviewer describes the D-pad navigation as "noticeably slower and less intuitive" than touchscreen competitors like the Trezor Safe 5 or ELLIPAL Titan, with scrolling through long addresses or menus requiring real patience.

The S1 uses a plastic ABS and PVC construction, explicitly more basic than the S1 Pro's aluminum alloy and tempered-glass build. Real, independently-documented complaints describe the small screen as scratching easily and the battery self-discharging during storage. A genuine, distinctive positive: the 400 mAh battery can be recharged via USB-C or supplemented with standard AAA batteries, real flexibility most competitors don't offer.

SafePal is genuinely backed by Binance Labs, and the company reports a real, large user base of 20 to 25 million people across its software and hardware products. SafePal responded reasonably quickly to Kraken's 2021 disclosure, patching the confirmed downgrade vulnerability. But the apparently still-unresolved GPL license violation, independently reconfirmed as recently as December 2025, nearly five years after SafePal said it intended to release the required source code, is a genuine, ongoing reliability and transparency concern.

At $49.99, this is genuinely one of the most affordable hardware wallets in this entire series, delivering a certified EAL6+ secure element and a fully air-gapped design well below what most direct competitors charge for comparable core security architecture. No subscription fee.

Three included mnemonic phrase cards give buyers a real, immediate way to record their seed phrase. A separately-sold "Cypher Seed Board," a metal plate for engraving the seed phrase against fire, water, and corrosion, is a real, genuine durable backup option. Dual power-source flexibility (AAA batteries or USB-C) is itself a real, distinctive extra.