Introducing Ambire Ice: the Hardware Wallet Built for Safe
Meet Ambire Ice: a hardware wallet built for Safe! Designed to simplify transactions and make them easier to understand and verify, it offers a new approach to security for Safe accounts.
Say hello to Ambire Ice: the latest member of the Ambire family of secure wallets! Ambire Ice is an open-source hardware wallet built for Safe accounts in the Ambire extension and mobile app. Think of a physical device with transaction decoding, offline signing capabilities, dual secure-element key generation, and a transparent case with a new approach to security for Safe accounts.
Ambire Ice in under a minute: clear signing, an air-gap switch, two certified chips, and a detachable battery pack.
What is Ambire Ice
Ambire Ice is a device designed to simplify onchain transactions for Safe multisig wallets by making them easier to understand and verify. Unlike traditional hardware wallets, which may present complex smart contract interactions as opaque signing requests, Ambire Ice can reconstruct Safe transactions and display individual actions directly on its screen. This way, Safe users, including multisig operators and DAO treasuries, e.g., can inspect transfers, token approvals, batched transactions, and more before authorizing them.
This reduces the risk of “blind signing” transactions that are difficult to understand and may be hiding malicious intent in their underlying execution.
It is open-source for both hardware and firmware, and offers an air-gap switch for offline signing too. Ambire Ice works as a Safe signer over USB, Bluetooth, or QR, and it is post-quantum ready, allowing you to add a key to your Safe as soon as chains support it. Its large screen is simply made to be looked at!
Why we built it
First, ask yourself this question: do you trust your hardware wallet 100%?
Now consider this: even though hardware and multisig wallets are usually considered the golden standard in crypto security, they are not without their weaknesses. We’re all still checking our Ledgers because of the recent reseller implant (which cost users between $72 and $93 million). And this was just the latest - another approx. $120 million was gone in July 2026 when a build bug generated seeds for Coldcard users from a weak random-number generator. And let’s not forget that since hardware wallets can’t always decode transactions, a DELEGATECALL approved by Safe signers resulted in a staggering $1.4 billion loss for Bybit in February 2025.
These examples all boil down to the following 3 issues: blind signing as a standard, weak randomness, and supply chain attacks. This is why Ambire Ice is built differently: it decodes the Safe transaction on the device, creates keys within certified chips, and puts the whole board on display. And you can even build it yourself!
What does Ambire Ice bring to the table?
In a nutshell, the best a hardware wallet can ever be. Here’s what you’re getting with Ambire Ice:
Integration with Ambire and Safe
Ambire Ice is built around Ambire and Safe accounts from day one, enabling seamless interaction between the two. It reduces friction and is designed to feel like a natural extension to your Ambire+Safe setup you already know.
Safe signer in 3 ways, incl. offline signing with a single switch
You can use Ambire Ice as a Safe signer over USB, QR, or Bluetooth, and you can switch between modes easily. USB provides a direct, wired connection to your computer, QR keeps the device fully air-gapped and takes signing offline, and Bluetooth makes signing on mobile convenient.
Perfect clear signing
See exactly what you’re signing for every single action! Ambire Ice decodes Safe transactions and displays individual actions, including transfers and approvals, on its screen. It also includes warnings for changes to Safe owners, signature thresholds, and modules.
Built to be looked at
The hardware and firmware are open: anyone can inspect it, and anyone can build one. Ambire Ice offers see-through hardware designs, board files, and firmware built on a fork of Trezor's open-source code, allowing you to visually inspect internal components.
Maximum security
Ambire Ice uses a dual secure-element architecture that combines NXP and Infineon secure elements to protect against various types of physical attacks.
Post-quantum readiness
The design of Ambire Ice is prepared for a future integration of post-quantum signing through an additional Safe owner, as soon as chains support it. The account address will not be changed, and no migration will be necessary.
Pre-order your Ambire Ice now (or build your own)
Pre-order your device now at an early bird rate of $119 for the first 200 devices. Afterward, the price will go up to $159 for the fully assembled wallet. All you need to do to pre-order is register your interest and pay a non-refundable $10 deposit to reserve it. Shipping for Ambire Ice will begin in early 2027.
You would be able to choose between Ice Blue, Orange Crush, Atomic Purple, or Crystal Clear casing. If you don’t fancy waiting, you can build your own! You will find every file you need: the board (ready for JLCPCB or PCBWay) and a case you can print at home.
FAQ
How does the device work with my existing setup
Ambire Ice is built to work with existing Ambire and Safe wallets as a hardware signer device. It simply reduces friction and improves security in the process you already know and trust.
Do I need an existing account or wallet
Ambire Ice will work for existing Ambire and Safe setups upon launch. Later on, we will add support for other wallet setups.
What is the price
The full price of the device is $159, but the first 200 users to pre-order can take advantage of a discounted rate of $119.
How do I reserve my Ambire Ice
You can pre-order here and pay a $10 deposit to reserve your device.
Is the preorder payment refundable
No, the $10 deposit is non-refundable.
What colors are available
Ambire Ice is available in Ice Blue, Orange Crush, Atomic Purple, or Crystal Clear.
How will shipping work
Once the product is available for shipping, we will notify you via email, and you will be able to order a fully assembled Ambire Ice to a PO box.
When will shipping start
Shipping is expected to begin in early 2027. We will notify all those who pre-order, as well as announce when it’s readily available to ship.
Which wallets & networks are supported
Currently, Ambire Ice supports Ambire wallets and Safe accounts, and all networks available to them.
Where can I get support
You can find support articles, as well as create a ticket for our support team here.
What is included
If you purchase the full pack of Ambire Ice, it includes the device and the battery holder.
If I choose DIY, what do I need to build it myself
You can find all the files needed: the board, ready for JLCPCB or PCBWay, and a case you can 3D print at home.
Interested in Ambire? Follow us:
Discord | X (Twitter) | Reddit | GitHub | Telegram
