HardwareWallets_DF_List

KO | EN

gitlite — search

#java #python #react #hacktoberfest #spring-boot #machine-learning #javascript #database #sql #reactjs #spring-security #security

HardwareWallets_DF_List

★ 28 Open GitHub ↗

List of Hardware Wallets for Digital Forensics

// repository documentation

Was this content helpful?

★ 0 (0 ratings)

# Hardware Wallets Digital Forensics List
List of Hardware Wallet vendor IDs and Product IDs to be used for Digital Forensics detection.

The below list may be used for forenscis analysis of a suspect's machine's logs of USB devices connected.  
List is provided as best-effort and is not exhaustive.

## Disclaimer
*Prior to working on this repository and its contents, please make sure your agree to our [disclaimer](https://github.com/INTERPOL-Innovation-Centre/DISCLAIMER)*  
*Please let us know by opening an [Issue](https://github.com/INTERPOL-Innovation-Centre/HardwareWallets_DF_List/issues) if you want to suggest a new feature or device description or find an error or addition.*

### Vendors and Products Identifiers
Below is a list of Vendor and Product IDs as would be found in USB devices logs.  
Forensics examiners may use this list to identify if such a device has been seen on the suspect's machines.

| _VID(0x) | _PID(0x) | Vendor name | Device desc. | Attribution URI |
| :------- | :------- | :----------- | :---------- | --------------- |
| 03eb | 2402 | ShiftCrypto  | BitBox01 (DigitalBitBox)   | [shiftcrypto.com](https://shiftcrypto.support/help/en-us/9-troubleshooting/15-usb-connection-issues-my-bitbox02-is-not-detected) |
| 03eb | 2403 | ShiftCrypto  | BitBox02                   | [shiftcrypto.com](https://shiftcrypto.support/help/en-us/9-troubleshooting/15-usb-connection-issues-my-bitbox02-is-not-detected) |
| 096e | 0891 | Feitian Tech | JuBiter Blade              | [Github](https://github.com/search?q=user%3AJubiterWallet+VID&type=code) |
| 1209 | aaaa | Prokey       | Optimum                    | [Github](https://github.com/prokey-io/prokey-optimum-firmware/blob/a0ad6a323a4e51dd1d2d09d7e2786b6f5c65d575/firmware/usb.c) |
| 1209 | abba | Generic      | SafeWISE CoinSafe          | [Linux-usb.org](http://www.linux-usb.org/usb.ids) |
| 1209 | b0b0 | Generic      | Monero Hardware bootloader | [Linux-usb.org](http://www.linux-usb.org/usb.ids) |
| 1209 | c0dA | Generic      | Monero Hardware            | [Linux-usb.org](http://www.linux-usb.org/usb.ids) |
| 1209 | d00d | Generic      | Monero Hardware developer  | [Linux-usb.org](http://www.linux-usb.org/usb.ids) |
| 1209 | 53c0 | SatoshiLabs  | Trezor v2 bootloader       | [Github](https://github.com/trezor/trezor-suite/blob/130b17ff0d52b67079d29b4e7250637528be1def/packages/suite-native/android/app/src/main/res/xml/devices.xml) |
| 1209 | 53c1 | SatoshiLabs  | Trezor v2                  | [Github](https://github.com/trezor/trezor-suite/blob/130b17ff0d52b67079d29b4e7250637528be1def/packages/suite-native/android/app/src/main/res/xml/devices.xml) |
| 1209 | 7000 | Secalot      | Secalot Dongle             | [secalot.com/downloads/ HID Rules](https://s3.eu-central-1.amazonaws.com/secalot.com/99-hid.rules) |
| 1209 | 7001 | Secalot      | Secalot Bootloader         | [secalot.com/downloads/ HID Rules](https://s3.eu-central-1.amazonaws.com/secalot.com/99-hid.rules) |
| 1209 | 7551 | Generic      | OpenDime DAFU bootloader   | [Github](https://github.com/opendime/DAFU/blob/master/Makefile) |
| 1209 | 9998 | Opolo        | Cosmos Bootloader          | [pid.codes](https://pid.codes/1209/) |
| 1209 | 9999 | Opolo        | Cosmos Firmware            | [pid.codes](https://pid.codes/1209/) |
| 2341 | 003d | Bitlox       | Ultimate aka lockbox 3A8C  | [Github](https://github.com/BitLox/bitlox-firmware/blob/074f009b5052b3df0c7f562649d393cfaa3e1dd1/.settings/org.eclipse.cdt.core.prefs) |
| 2341 | 003e | Bitlox       | Ultimate aka lockbox       | [Github](https://github.com/BitLox/bitlox-firmware/blob/074f009b5052b3df0c7f562649d393cfaa3e1dd1/.settings/org.eclipse.cdt.core.prefs) |
| 2581 | 1807 | Ledger       | HW1                        | [Github](https://github.com/LedgerHQ/ledger-starter-iso/blob/b5f02dcf3c7388717a6decdc98afe26a9a54b011/README.md) |
| 2581 | 1808 | Ledger       | HW1                        | [Github](https://github.com/LedgerHQ/ledger-starter-iso/blob/b5f02dcf3c7388717a6decdc98afe26a9a54b011/README.md) |
| 2581 | 1b7c | Ledger       | HW1                        | [Github](https://github.com/LedgerHQ/ledger-starter-iso/blob/b5f02dcf3c7388717a6decdc98afe26a9a54b011/README.md) |
| 2581 | 2b7c | Ledger       | HW1                        | [Github](https://github.com/LedgerHQ/ledger-starter-iso/blob/b5f02dcf3c7388717a6decdc98afe26a9a54b011/README.md) |
| 2581 | 3b7c | Ledger       | HW1                        | [Github](https://github.com/LedgerHQ/ledger-starter-iso/blob/b5f02dcf3c7388717a6decdc98afe26a9a54b011/README.md) |
| 2581 | 4b7c | Ledger       | HW1                        | [Github](https://github.com/LedgerHQ/ledger-starter-iso/blob/b5f02dcf3c7388717a6decdc98afe26a9a54b011/README.md) |
| 2581 | f1d1 | Ledger       | HW1? Or Ledger Nano S Plus | [Github](https://github.com/LedgerHQ/openpgp-card-app/blob/64662c181f4c906288564cbfadc2db53df4534b0/src/sdk/usbd_impl.c) |
| 2b24 | All  | KeepKey      | Bitcoin Wallet             | [Linux-usb.org](http://www.linux-usb.org/usb.ids) |
| 2c97 | All  | Ledger       | Ledger HW2, Nano S, Aramis, X and Blue  | [Linux-usb.org](http://www.linux-usb.org/usb.ids) and [Github](https://github.com/LedgerHQ/udev-rules/blob/2776324af6df36c2af4d2e8e92a1c98c281117c9/add_udev_rules.sh) |
| 2c97 | 1000  | Ledger       | Ledger Nano S  | [Github](https://github.com/LedgerHQ/ledger-secure-sdk/blob/fe169b19c7445f2477c26035a827c22ba9f84964/lib_stusb_impl/usbd_impl.c#L139) |
| 2c97 | 3000  | Ledger       | Ledger HW2  | [Github](https://github.com/LedgerHQ/ledger-secure-sdk/blob/fe169b19c7445f2477c26035a827c22ba9f84964/lib_stusb_impl/usbd_impl.c#L159) |
| 2c97 | 4000  | Ledger       | Ledger Nano X  | [Github](https://github.com/LedgerHQ/ledger-secure-sdk/blob/fe169b19c7445f2477c26035a827c22ba9f84964/lib_stusb_impl/usbd_impl.c#L172) |
| 2c97 | 5000  | Ledger       | Ledger Nano S Plus  | [Github](https://github.com/LedgerHQ/ledger-secure-sdk/blob/fe169b19c7445f2477c26035a827c22ba9f84964/lib_stusb_impl/usbd_impl.c#L188) |
| 2c97 | 6000  | Ledger       | Ledger Nano Stax  | [Github](https://github.com/LedgerHQ/ledger-secure-sdk/blob/fe169b19c7445f2477c26035a827c22ba9f84964/lib_stusb_impl/usbd_impl.c#L209) |
| 2c97 | 7000  | Ledger       | Ledger Nano Flex  | [Github](https://github.com/LedgerHQ/ledger-secure-sdk/blob/fe169b19c7445f2477c26035a827c22ba9f84964/lib_stusb_impl/usbd_impl.c#L230) |
| 2f48 | 2130 | D'CENT       | Biometric Wallet           | [Github](https://github.com/DcentWallet/user-manual/blob/95a219e02c966f05a3d97b03404bef106580df10/biometric-wallet/firmware-update/firmware-trouble-shooting-windows.md) |
| 534c | 0001 | SatoshiLabs  | Trezor v1                  | [Github](https://github.com/trezor/trezor-suite/blob/130b17ff0d52b67079d29b4e7250637528be1def/packages/suite-native/android/app/src/main/res/xml/devices.xml) |
| 0483 | 5740 | Open Source | Open Source Trezor         | [ST Electronics driver recomendations](https://os.mbed.com/forum/platform-168-ST-Nucleo-F429ZI-community/topic/36186/?page=1#comment-63221) |
| d13e | cc10 | CoinKite     | ColdCard                   | [Github](https://github.com/Coldcard/firmware/search?q=pid) |

### Missing or further research required
- **SafePal** Ltd. Officially backed-up by Binance. Product: **SFP SafePal S1**.  
- **SecuX Technology Inc.**, Taiwan. Products: **W10, W20 and V20 Stone**.  
- **Opolo Inc.**, Hong-Kong and Opolo SARL, Luxembourg. Product: **Cosmos**. May appear as Interbiometrics (**\_VID 1209 and \_PID 0x1000 to 0x1FFF**).  
- **Ngrave.IO NV**, Belgium. Product: **Zero**. Is air-gapped but does have a USB-C for charging and firmware update.
- **Cobo Global Ltd**, Cayman Islands. Products: **Keystone Essential and Keystone Pro** - Cobo Vault is an open source air-gapped HD wallet. It uses USB ONLY for Firmware updates. Cobo Vault uses QRcodes only. The Cobo Hardware is essentially an Android mobile phone based on an ARM Cortex A7 processor. [Hardware schematics](https://github.com/CoboVault/cobo-vault-docs/tree/master/hardware) show that the Keystone device is built on component U201, an MTK processor model MT6580A/WM (same as the Ulefone Note 7). A firmware update using USB would likely leave traces as **\_VID=0x0D28** but this trace could be left by any other hardware based on the MTK ARM Cortex-A7. The Cobo firmware update code uses the Keil MDK and does not seem to be programmed to check the \_PID & \_VID combination. Considering this, digital forensics exploitation of this hardware wallet via JTAG and with [OpenOCD](https://openocd.org) could proove interesting.

### Specific no-USB HD Wallets
- **Embedded Agency LLC**, Canada and USA. Product: **Husky HDW20** - This HD Wallet is only using Wifi, including for OTA Firmware update (Over-The-Air)

- **Ellipal Ltd.**, Hong-Kong. Products: **EC01, Titan Mini Cold Wallet and Titan Cold Wallet**. This is an air-gapped wallet. The Firmware update is done via micro SD card inserted in a seperate "security module". The micro-USB port of the security module is only for charging
- **C∞lBitX (CoolBitx)**, Taiwan. Products: **CoolWallet S and CoolWallet Pro**. These are Bluetooth only cards, uses NFC to charge. CoolBitX is also the creator of the Sygna Bridge, a compliance tool used as a gateway for the exchange and querying of data accross Financial actors
- **CoinKite Inc.**, Canada. Products: **OpenDime and ColdCard**. Although these are air-gapped cards, the ColdCard Firmware update is done in DFU mode via USB

### Related hardware
- **Axell Corporation**, Japan. Product: **VIPPool Wallet**. Sometimes mentioned as "a cold wallet for transfers" but our research tends to show theses are not cold wallets but licensing USB sticks also manufactured by Axell Corporation, Japan as product **"[Shalo](https://shalo.jp)"**. \_VID and \_PID information not found.

### Pictures
The below are images from the manufacturers' websites (links below).
Provided here for examiners who may have to search a scene for exhibits. 
 
| Brand | Model |
| :-------- | :--: |
| Bitlox | ![Ultimate](https://raw.githubusercontent.com/INTERPOL-Innovation-Centre/HardwareWallets_DF_List/main/Images/BITLOX-Ultimate.png) Ultimate |
| Cobo Global | ![Cobo Vault Pro and Essential](https://raw.githubusercontent.com/INTERPOL-Innovation-Centre/HardwareWallets_DF_List/main/Images/COBO-Vault-Pro.png) Cobo Vault Pro and Essential (aka Keystone Pro) |
| Coinkite | ![Coldcard](https://raw.githubusercontent.com/INTERPOL-Innovation-Centre/HardwareWallets_DF_List/main/Images/COINKITE-Coldcard.png) Coldcard |
| Coinkite | ![OpenDime](https://raw.githubusercontent.com/INTERPOL-Innovation-Centre/HardwareWallets_DF_List/main/Images/COINKITE-OpenDime.png) OpenDime |
| CoolBitX | ![CoolWallet Pro](https://raw.githubusercontent.com/INTERPOL-Innovation-Centre/HardwareWallets_DF_List/main/Images/COOLBITX-Coolwallet-Pro.png) CoolWallet Pro (Crypto.com branded) |
| CoolBitX | ![CoolWallet S](https://raw.githubusercontent.com/INTERPOL-Innovation-Centre/HardwareWallets_DF_List/main/Images/COOLBITX-Coolwallet-S.png) CoolWallet S (OKEX branded but could be Binance and others)
| Cryptnox | ![Cryptnox card](https://raw.githubusercontent.com/INTERPOL-Innovation-Centre/HardwareWallets_DF_List/main/Images/CRYPTNOX-card.png) Cryptnox card |
| Ellipal | ![EC01](https://raw.githubusercontent.com/INTERPOL-Innovation-Centre/HardwareWallets_DF_List/main/Images/ELLIPAL-EC01.png) EC01 |
| Ellipal | ![Titan](https://raw.githubusercontent.com/INTERPOL-Innovation-Centre/HardwareWallets_DF_List/main/Images/ELLIPAL-Titan-Mini.png) Titane Mini |
| Ellipal | ![Titan](https://raw.githubusercontent.com/INTERPOL-Innovation-Centre/HardwareWallets_DF_List/main/Images/ELLIPAL-Titan.png) Titane |
| Feitian | ![JuBiter Blade](https://raw.githubusercontent.com/INTERPOL-Innovation-Centre/HardwareWallets_DF_List/main/Images/FEITIAN-Jubiter-Blade.png) JuBiter Blade |
| LEDGER | ![Ledger HW1](https://raw.githubusercontent.com/INTERPOL-Innovation-Centre/HardwareWallets_DF_List/main/Images/LEDGER-HW1.png) HW1|
| LEDGER | ![Ledger Nano Blue](https://raw.githubusercontent.com/INTERPOL-Innovation-Centre/HardwareWallets_DF_List/main/Images/LEDGER-Nano-Blue.png) Nano Blue |
| LEDGER | ![Ledger Nano S](https://raw.githubusercontent.com/INTERPOL-Innovation-Centre/HardwareWallets_DF_List/main/Images/LEDGER-Nano-S.png) Nano S |
| LEDGER | ![Ledger Nano X](https://raw.githubusercontent.com/INTERPOL-Innovation-Centre/HardwareWallets_DF_List/main/Images/LEDGER-Nano-X.png) Nano X |
| LEDGER | ![Ledger Nano S Plus](https://raw.githubusercontent.com/INTERPOL-Innovation-Centre/HardwareWallets_DF_List/main/Images/LEDGER-Nano-S-Plus.png) Nano S Plus|
| LEDGER | ![Ledger Flex](https://raw.githubusercontent.com/INTERPOL-Innovation-Centre/HardwareWallets_DF_List/main/Images/LEDGER-Flex.png) Flex|
| LEDGER | ![Ledger Stax](https://raw.githubusercontent.com/INTERPOL-Innovation-Centre/HardwareWallets_DF_List/main/Images/LEDGER-Stax.png) Stax|
| NGRAVE | ![NGRAVE Zero Hardware Wallet](https://raw.githubusercontent.com/INTERPOL-Innovation-Centre/HardwareWallets_DF_List/main/Images/NGRAVE-Zero.png) NGrave Zero |
| Prokey | ![Optimum](https://raw.githubusercontent.com/INTERPOL-Innovation-Centre/HardwareWallets_DF_List/main/Images/PROKEY-Optimum.png) Optimum |
| Secalot | ![Dongle](https://raw.githubusercontent.com/INTERPOL-Innovation-Centre/HardwareWallets_DF_List/main/Images/SECALOT-Dongle.png) Dongle (discontinued)|
| SecuX | ![SecuX V20](https://raw.githubusercontent.com/INTERPOL-Innovation-Centre/HardwareWallets_DF_List/main/Images/SECUX-V20.png) V20 Front ![SecuX V20](https://raw.githubusercontent.com/INTERPOL-Innovation-Centre/HardwareWallets_DF_List/main/Images/SECUX-V20-Back.png) V20 Back |
| SecuX | ![SecuX W10](https://raw.githubusercontent.com/INTERPOL-Innovation-Centre/HardwareWallets_DF_List/main/Images/SECUX-W10.png) W10 |
| SecuX | ![SecuX W20](https://raw.githubusercontent.com/INTERPOL-Innovation-Centre/HardwareWallets_DF_List/main/Images/SECUX-W20.png) W20 |
| ShapeShift | ![KeepKey](https://raw.githubusercontent.com/INTERPOL-Innovation-Centre/HardwareWallets_DF_List/main/Images/SHAPESHIFT-KeepKey.png) KeepKey |
| ShiftCrypto | ![BitBox01](https://raw.githubusercontent.com/INTERPOL-Innovation-Centre/HardwareWallets_DF_List/main/Images/SHIFTCRYPTO-Bitbox01.png) BitBox 01 aka Digital BitBox |
| ShiftCrypto | ![BitBox01](https://raw.githubusercontent.com/INTERPOL-Innovation-Centre/HardwareWallets_DF_List/main/Images/SHIFTCRYPTO-Bitbox02.png) BitBox 02 |
| TANGEM | ![Tangem Cards and Ring](https://raw.githubusercontent.com/INTERPOL-Innovation-Centre/HardwareWallets_DF_List/main/Images/TANGEM-ring-cards.avif) Cards and Ring |
| TREZOR | ![Trezor T](https://raw.githubusercontent.com/INTERPOL-Innovation-Centre/HardwareWallets_DF_List/main/Images/TREZOR-Model-T.png) Model T or "v2" |	
| [Open Source TREZOR Dev Kit](https://mcudev.github.io/trezor-model-t-dev-kit/) | ![Trezor Dev Kit](https://raw.githubusercontent.com/INTERPOL-Innovation-Centre/HardwareWallets_DF_List/main/Images/TREZOR-DevKit1.png) ![Trezor Dev Kit](https://raw.githubusercontent.com/INTERPOL-Innovation-Centre/HardwareWallets_DF_List/main/Images/TREZOR-DevKit2.png) Open Source Dev Kit |

### Sources

A list of Hardware wallets is available at [https://en.bitcoin.it](https://en.bitcoin.it/wiki/Hardware_wallet)   
 
Ledger	https://www.ledger.com/  
Trezor	https://trezor.io/  
Tangem	https://tangem.com/  
Open Source Trezor Dev Kit   https://mcudev.github.io/trezor-model-t-dev-kit/  
Shapeshift Keepkey	https://shapeshift.com/keepkey  
Shiftcrypto BitBox	https://shiftcrypto.ch/  
C∞lWallet (CoolWallet) https://www.coolwallet.io/  
Cobo Vault (Keystone) https://cobo.com/about?locale=en or https://keyst.one  
Cold Card Wallet https://coldcardwallet.com/  
Cryptnox	https://cryptnox.com/  	  
Ellipal	https://www.ellipal.com/  
JuBiter Blade https://www.ftsafe.com/store/product/cryptocurrency-wallet/  
SafeWize CoinSafe https://safewise.io/#/home  
Husky HDW20 https://www.huskywallet.com  
SFP SafePal https://safepal.io  
D'CENT https://dcentwallet.com  
Cosmos https://opolo.io  
VIPPool Wallet https://www.axell.co.jp  
Zero https://www.ngrave.io  
W10, W20, V20 Stone https://secuxtech.com  
Ultimate https://www.bitlox.com  
Optimum https://prokey.io  
Dongle https://www.secalot.com

HardwareWallets_DF_List

Explore Similar Repositories

Was this content helpful?

Recent Feedback

Download README