When it comes to crypto, "trust us, bro" isn’t going to cut it. At Ryder, we believe real trust has to be earned, and that the only way to earn it is through a solid track record. That's why we put Ryder One through a full independent security audit by Halborn. We’re even taking it a step further by making Ryder One’s TapSafe open source.
Why Halborn?
Halborn has audited some of the largest and most critical infrastructure in the space, from blockchain protocols and DeFi platforms to hardware security firms. We chose them because we wanted a firm that would actually find something if there was something to find. From October 28 to December 5, 2025, the experts at Halborn reviewed and tested Ryder One.
Halborn has audited some of the largest and most critical infrastructure in the space. They work with major blockchain protocols, DeFi platforms, and hardware security firms. We chose them because we wanted a firm that would actually find something if there was something to find.
From October 28 to December 5, 2025, the experts at Halborn reviewed and tested Ryder One. The result of the audit: a confirmed solid cryptographic foundation and validated core architecture.
Here's what that means, and why it matters.
What the Audit Covered
The audit focused on Ryder One's Secure Element firmware, the JavaCard applet at the heart of the device. This is where your keys live. This is where every cryptographic operation happens. It's the most critical piece of code in the stack.
Halborn validated the following across the full threat model:
- Cryptographic implementations against industry standards (BIP32, BIP39, BIP44)
- Secp256k1 elliptic curve operations for Bitcoin and Ethereum
- Key derivation, seed generation, and HD wallet functionality
- Shamir Secret Sharing implementation, validated against standards and math
- TapSafe recovery logic and distributed share security
- PIN-based authentication and access control policies
- NFC pairing and secure channel establishment
- Input validation and APDU command handling
- Side-channel attack resistance
- Tamper-resistant storage using the EAL6+ secure element
Their conclusion: the firmware implements hardware wallet functionality with a solid cryptographic foundation. The strength of the core architecture was confirmed.
No device is infinitely secure, but Ryder One was built to minimize every known category of risk, and the audit confirmed that the architecture delivers on that promise.
The Next Step: Going Open Source
An audit tells you the code is sound; open source lets anyone verify that for themselves, forever.
We're making TapSafe Recovery open source because we believe self-custody hardware should be transparent by default. When you're trusting a robust recovery with everything you own on-chain, you shouldn't have to take our word for anything. For you, this means:
- Security researchers can review the code independently
- The crypto community can verify our claims
- Developers can build on top of Ryder One’s TapSafe Technology
- No hidden logic, no black boxes, no "trust us, bro"
This is the standard we hold ourselves to and it's the standard the space deserves.
Built with Redundancy, Verified by Experts
Ryder One was designed from the ground up for humans who know that things go wrong, from lost phones and broken tags to unexpected failures.
That's why we built TapSafe Recovery with three independent layers: NFC Recovery Tags, Recovery Contacts, and Phone Backup. That's why Ryder One is fully air-gapped, with no Bluetooth, no Wi-Fi, and no cables. That's why every transaction goes through a two-tap confirmation before anything moves.
This audit is a step towards going fully open source.
Read the Audit, Explore the Code
The Halborn audit report is available now, and TapSafe’s open source repository will be live soon. If you're a security researcher, a developer, or just someone who wants to understand exactly how Ryder One keeps your crypto safe: we're ready for you.
Read Halborn’s report here.
Ryder One is available now at ryder.id. The most secure way to self-custody your crypto just got independently verified.
Share: