SYS.ARCH // HARDWARE SPECIFICATION
ISOLATION LEVEL: EAL6+ COMPLIANT
[ SECTION 02 // HARDWARE CORE ]
SECURE ELEMENT & BOLOS CORE
Unlike software wallets or consumer microcontrollers, the architecture isolates private cryptographic keys inside a dedicated, attack-resistant secure chip governed by a proprietary multi-application operating system.
CERT: ANSSI CC EAL6+ CERTIFIED
OS: BOLOS ISOLATED ENGINE
PATH: FULL HARDWARE ROOT-OF-TRUST
The Secure Element is an audited, tamper-proof microcontroller engineered specifically to withstand advanced side-channel attacks, power glitching, fault injection, and physical decapping. It generates and stores your root seed in isolated memory that cannot be accessed by external hosts.
LAYER 01 // PHYSICAL SECURITY
SECURE ELEMENT CHIP (ST33K1M5C / CC EAL6+)
BOLOS eliminates monolithic firmware vulnerabilities by establishing an isolated execution environment for every cryptocurrency app. Applications run in sandboxed user-space, communicating strictly through cryptographic syscalls without ever exposing shared memory or root seeds.
LAYER 02 // FIRMWARE & OS
BOLOS (BLOCKCHAIN OPEN LEDGER OS)
The screen and physical confirmation buttons connect directly into the Secure Element, bypassing the host computer entirely. Transaction addresses and amounts are rendered through a trusted hardware pipeline, preventing Man-in-the-Middle spoofing and blind-signing attacks.
LAYER 03 // TRUSTED DISPLAY & IO
DIRECT PIN & TRUSTED SCREEN PIPELINE
[ SEC-OPS // PROTOCOL 01 ]
CORE SECURITY STANDARDS
NON-NEGOTIABLE ARCHITECTURE FOR SELF-CUSTODY. ELIMINATE HUMAN ERROR, BLIND SIGNING VULNERABILITIES, AND DIGITAL INTERCEPTION VECTORS.
RULE // 01
[ AIR-GAPPED ]
SEED PHRASE ISOLATION
NEVER TYPE YOUR 24 RECOVERY WORDS ONTO A COMPUTER, SMARTPHONE, OR CAMERA-EQUIPPED DEVICE. SECURE IN METALLIC BACKUPS OFFLINE ONLY.
THREAT VECTOR
KEYLOGGERS / CLOUD SYNC
RULE // 02
[ HARDWARE EAL6+ ]
ON-DEVICE VERIFICATION
ALWAYS VERIFY DESTINATION ADDRESSES AND AMOUNTS DIRECTLY ON THE HARDWARE SCREEN. NEVER TRUST COMPUTER MONITORS SUSCEPTIBLE TO CLIPBOARD INJECTIONS.
THREAT VECTOR
CLIPBOARD HIJACKERS
RULE // 03
[ ZERO-TRUST ]
BLIND SIGNING DEFENSE
DISABLE BLIND SIGNING UNLESS INTERACTING WITH AUDITED PROTOCOLS. NEVER SIGN UNPARSED HEXADECIMAL DATA OR UNVERIFIED SMART CONTRACT PERMITS.
THREAT VECTOR
MALICIOUS PERMITS / PHISHING