A new NGRAVE security notice says the hardware wallet maker is facing high-level cyber threats. The official post was published on Oct. 28, 2026, on its X account.. The team says it is monitoring and responding.
The notice does not describe a confirmed breach or any loss of funds. It focuses on shielding users from impersonators while the threats continue. Hardware wallets keep private keys offline, so scammers usually aim for the secret words instead.
Users are asked to stay alert to anyone posing as the team, whatever the channel. According to the post, impersonation attempts can arrive through:
Messages and emails
App notifications
Websites
Support accounts
The post says the team will never ask for a recovery phrase or perfect key on any of those routes. A recovery phrase is a list of words that restores a wallet. The Perfect Key is another recovery credential that it names.

Source: Official X Post
It names only one safe place to type a recovery phrase. That place is the screen of a ZERO, the company’s hardware wallet, and only while restoring a wallet.
The post lists these places as never acceptable:
A phone
A computer
A website
Keys stay offline on the ZERO. If a user never typed the phrase elsewhere, the post says they are safe. Any other request for it is a scam, because anyone holding the keys can steal funds.
The table below summarizes the NGRAVE security notice using only details the company posted.
Item | Detail shared |
Post date | Oct 28, 2026 |
Reported issue | High-level cyber threats |
Company response | Monitoring and responding |
Main risk named | Impersonation of the team |
Link advice | Type ngrave.io by hand or use a saved bookmark. |
Support email | support@ngrave.io |
Key storage | Offline on the ZERO |
The company also says to avoid clicking links that claim to lead to its site. It names that same domain as its only official one, plus its own subdomains for the shop and support pages.
Anyone who receives an unexpected message or alert can compare it with these points before acting.
Objectively, the NGRAVE security notice is a precaution, not an incident report. It names a threat level but gives no technical detail, no timeline, and no sign of user losses.
The advice matches common hardware wallet practice. Keep recovery data off connected devices and check domains by hand. A hardware wallet protects keys only while the secret words stay private, which is the point the update stresses.
Scammers often copy security warnings, so careful readers treat unsolicited messages as suspect in any crypto security news cycle.
The NGRAVE security notice is a short, precautionary update from the team. It asks users to guard their recovery details, verify the domain by hand, and ignore unsolicited requests.
Readers should follow the official X account for further updates, since it shares no timeline or technical detail.
YMYL Disclaimer: This article is for educational and informational purposes only. It is not financial advice, a price prediction, or a guarantee of returns. Readers should verify details through official channels and do their own research.