What Is Ellipal? Titan Cold Wallets, the X Card and How They Work

Ellipal is a hardware wallet company founded in 2018. Its legal operator is ELLIPAL Limited, and its terms are governed by Hong Kong law ¹². It makes two kinds of device. The Titan 2.0 is an "air-gapped" cold wallet: it has no USB data link, Bluetooth or Wi-Fi and exchanges transactions with your phone only through QR codes. The X Card is a credit-card-sized wallet that signs when you tap it against your phone over NFC ³. Both are self-custody: Ellipal says it never sees or stores your private keys or recovery phrase ².

Facts checked October 23, 2026 8 cited sources No score on this page, no affiliate links

Ellipal rating and evidence Best hardware wallets ranking ellipal.com

Founded2018Hardware wallet Official siteellipal.comopens in a new tab Incidents10 with recovery confirmed In our ratingsHardware walletsopen the scorecard

At a glance

Operator: ELLIPAL Limited; Hong Kong law governs ²
Founded: 2018 ¹
Devices: Titan 2.0 ($169), Titan Mini, X Card ($69 single; 3-card set from $89) ¹³
Connection: Titan: QR codes only. X Card: NFC tap ³
Secure chip (as stated by Ellipal): Titan 2.0: CC EAL5+. X Card: CC EAL6+ ⁴
Coverage (company-stated): 45+ blockchains, 10,000+ tokens ³
Custody: Self-custody; Ellipal does not store keys or seed phrases ²
Official site: ellipal.com
Last checked: October 23, 2026

Who makes Ellipal wallets

Ellipal's About page dates the company to 2018 and the first Titan to 2019. It lists the Titan Mini and Titan 2.0 as 2022–2023 releases and the X Card as a 2025 launch ¹. Its Terms of Service name the contracting party as ELLIPAL Limited, apply Hong Kong law and give Hong Kong courts exclusive jurisdiction ². Ellipal's website does not list founders or a registered address.

Ellipal says it has more than 1 million users in over 140 countries ³. These are the company's own figures.

Titan 2.0 and Titan Mini: QR-code signing

The Titan line is built around an air gap. The device never connects to a phone or computer by cable or radio ³. A transaction works like this:

You build the transaction in the Ellipal app on your phone, and the app displays it as a QR code.
The Titan's camera scans the code. You check the address and amount on its 4-inch touchscreen and approve it ³.
The Titan shows the signed transaction as a QR code, which the app scans and broadcasts.

The private key is generated and kept inside the device's secure chip, which Ellipal describes as CC EAL5+ rated ⁴. The Titan 2.0's metal housing is sealed. Ellipal says that forcing it open, or light and temperature changes picked up by internal sensors, wipes the keys automatically ⁴.

Because there is no USB data port, firmware updates go through a separate Security Adapter rather than a cable or microSD card ⁶. The Titan 2.0 costs $169 on ellipal.com ³. The Titan Mini is a smaller version; Ellipal's pages did not list its price or specifications.

ELLIPAL X Card: NFC tap-to-sign

The X Card is a battery-free card that holds one wallet. It signs a transaction when you hold it to your phone's NFC area while the Ellipal app is open ⁵.

Setup uses a separate offline device, the X Card Starter. The Starter generates a 12-, 18- or 24-word recovery phrase on the card, has you write it down and confirm it, and sets a Card-PIN ⁵.
PIN protection: After 10 wrong PIN entries, the card resets to factory settings. You then restore it with the Starter and your recovery phrase ⁵.
No screen. The card has no display, so you review transactions on your phone ⁵. That is a trade-off against the Titan, where you can confirm details on a separate screen.
Chip: Ellipal says the key stays inside a CC EAL6+ secure chip ⁴.

Ellipal lists the X Card at $69 in its menu and "from $89" for a three-card set, and the site shows both figures ³. Check the price at checkout.

Custody, the app and fees

Ellipal wallets are self-custodial. Ellipal's terms say the company has no access to your private keys, seed phrase, PIN or keystore, and that keystores are never synced to its servers ². If you lose your recovery phrase, Ellipal cannot restore your wallet.

The Ellipal app shows balances and builds transactions. It also connects to dApps through WalletConnect ³. In-app swaps and crypto purchases are run by third-party providers, which charge their own fees. Ellipal's terms also allow it to charge for some integrations ². Network fees go to the blockchain. Compare what you send with what you receive to see the full cost of a swap or purchase.

Security model and its limits

An air-gapped device removes the cable and Bluetooth routes that malware could use to reach the device ³. It does not protect you against the following:

A recovery phrase that leaves the device. Anyone with your 12–24 words controls the funds, whatever hardware you own.
Importing your key into a phone app. That turns cold storage into a hot wallet. This was the central issue in the 2025 theft below ⁸.
Approving a malicious transaction. Read the address and amount on the Titan's screen before signing.
Fake support and lookalike sites. Searches for "ellipal discount code" and "ellipal official website" are common targets. Buy only from ellipal.com or retailers Ellipal links to.

Ellipal's Security Lab describes internal code review and a bug bounty programme, but names no independent hardware or firmware audit ⁴. Its chip ratings are its own statements. For how other device makers handle the same problems, see our profiles of Ledger, Tangem, which also makes NFC cards, and SafePal, which also makes QR-signing devices.

Incident record

1 outcome unclear

$3 million XRP theft from an Ellipal user

October 12, 2025outcome unclear

A US user lost about $3.05 million in XRP. The attacker moved the funds through more than 120 XRP-to-Tron swaps and passed them to OTC desks linked to Huione by October 15 ⁷. On-chain investigator ZachXBT described the cause as "user error rather than a hardware zero-day". He said the victim believed he was using cold storage when the wallet in fact functioned as a hot wallet ⁷. Ellipal said the wallet's private key had been imported into a mobile app, which in its words effectively converted the cold wallet into a hot one ⁸. No Ellipal device or firmware vulnerability was reported. Recovery was described as unlikely ⁷.

Outcome: Device not compromised; key exposure on a phone (no platform-wide impact reported).
Loss: about $3.05 million (one user)

Source: theblock.co

Hacks in DefiLlama’s public database are also scored as the security record on the Ellipal rating page.

Questions about Ellipal

Was Ellipal hacked?

No breach of Ellipal's devices or systems has been reported. In October 2025, about $3 million in XRP was stolen from one user. Ellipal and the investigator ZachXBT attributed the loss to the private key being used on an internet-connected phone, not to a hardware flaw ⁷⁸.

Is Ellipal a decentralized or Web3 wallet?

It is a self-custody wallet: you hold the keys, and Ellipal does not ². The app connects to decentralized apps through WalletConnect, and the device or card signs each transaction ³.

What is the difference between the Titan 2.0 and the X Card?

The Titan 2.0 ($169) signs through QR codes and has its own touchscreen for checking transactions. The X Card ($69) is a screenless NFC card you tap against your phone, set up with a separate Starter device ³⁵.

How many coins does Ellipal support?

Ellipal says its wallets cover more than 45 blockchains and over 10,000 tokens ³. Check that a specific network is supported in the app before you send funds.

Can Ellipal recover my wallet if I lose the recovery phrase?

No. Ellipal states that it does not store private keys or seed phrases ². Your written recovery phrase is the only backup. Ellipal sells a steel plate for storing it ³.

See CoinPulse's Ellipal rating and evidence and the hardware wallet ratings. For background, read what a hardware wallet is, hot vs cold wallets and crypto phishing.