Harder to lose.Harder to steal.

One Vault for your dollars and bitcoin, with three keys in three hands. A stolen key isn't enough, and Ficha alone can't move them or freeze them.1

One key, one point of failure.

Most wallets, on a phone or on a hardware device, rest on a single key and the words that recover it: whoever gets them takes everything. On an exchange, someone else holds the keys, and your savings depend on that company. In 2025 alone, Chainalysis counted 158,000 thefts from personal wallets, and more than 3.4 billion dollars stolen in all. These are some of the documented cases; their sources are at the end of the page.

Phone and computer wallets

August 2013
Android. A flaw in how Android generated random numbers left every bitcoin wallet created on an Android phone, in any app, open to theft. Bitcoins were stolen before it was fixed, and users had to move their funds to new keys.
December 2014
Blockchain.info. A bug in its web wallet reused a number that has to change with every signature, which let anyone work out the affected users' private keys. Someone who spotted it moved 267 bitcoins to safety and handed them back.
August 2022
Slope. Thousands of Solana wallets were drained in a few hours. Security researchers found that Slope's phone app had been sending its users' recovery phrases, unencrypted, to an outside error-logging service.
June 2023
Atomic Wallet. More than 100 million dollars were taken from its users' wallets, according to Elliptic. The company said fewer than 0.1% of its users were affected, and didn't confirm the cause.
December 2025
Trust Wallet. A compromised version of its browser extension emptied its users' wallets. The founder of Binance, which owns it, put the losses at about 7 million dollars and said Trust Wallet would cover them.

Hardware wallets

July 2026
Coldcard. A firmware error, present since March 2021, made the recovery phrases its devices created far less random than they should have been, so they could be guessed. Its code is public, and the error sat there for more than five years. According to TRM Labs, attackers took about 1,816 bitcoin from more than 5,200 addresses.
October 2026
Ledger. Devices sold by a reseller in Southeast Asia carried a hidden chip that read the 24 recovery words off the screen and sent them out over the mobile network. Ledger confirmed the implant and is investigating where in the distribution chain the devices were tampered with. It hasn't confirmed the total; researchers tracing the funds estimate more than 90 million dollars.

Exchanges

February 2014
Mt. Gox. It filed for bankruptcy saying 850,000 bitcoin were missing, 750,000 of them its customers'. Its creditors began to be repaid in 2024, ten years later.
January 2018
Coincheck. Attackers took 523 million NEM, around 500 million dollars at the time, from a wallet the exchange kept online and moved with a single key. Coincheck paid its 260,000 affected users back in yen, out of its own funds.
January 2019
QuadrigaCX. It stopped paying after its founder died, owing about 76,000 clients 169 million Canadian dollars. The Ontario Securities Commission found that most of that money was already gone before his death: he had traded with it and kept part of it.
April 2021
Thodex. It halted trading and its founder left the country, leaving more than 400,000 users unable to reach their money. In 2023 he was convicted of aggravated fraud and sentenced to 11,196 years in prison.
November 2022
FTX. It froze withdrawals and filed for bankruptcy: its customers' deposits had been used for other purposes. Its founder was convicted of fraud and sentenced to 25 years. Its customers began to be repaid in 2025, in dollars, at the value on the day of the bankruptcy.

In each case, everything rested on a single key or a single company. In Vault, no key is enough on its own, and the three are in different hands: yours, Ficha's, and one held by an independent company that specializes in safeguarding keys. Your Wallet has a single key too: it's for everyday money. What you can't afford to lose belongs in Vault.

What if

Your key, with Ficha's

Ficha signs with you. The backup key is held by an independent company that safeguards keys: the app shows you which one.

You don't lose your savings

After verifying it's you, Ficha and the backup company move them to a new vault, with a new key of yours.

Ficha checks before it signs

Ficha won't sign past the amount you chose, and raising it takes days. A stolen key can't empty your Vault.

One key can't move them

Whoever gets Ficha's key has one key of three. Yours and the backup key are still in other hands.

One key can't move them

Whoever breaks in gets one key of three. Yours and Ficha's work as they do every day.

The backup works without Ficha

After verifying it's you, the backup company can sign with you to move your savings to another wallet.

  1. Every day

    Your key, with Ficha's

    Ficha signs with you. The backup key is held by an independent company that safeguards keys: the app shows you which one.

  2. You lose your key

    You don't lose your savings

    After verifying it's you, Ficha and the backup company move them to a new vault, with a new key of yours.

  3. You're hacked

    Ficha checks before it signs

    Ficha won't sign past the amount you chose, and raising it takes days. A stolen key can't empty your Vault.

  4. Ficha is hacked

    One key can't move them

    Whoever gets Ficha's key has one key of three. Yours and the backup key are still in other hands.

  5. The backup is hacked

    One key can't move them

    Whoever breaks in gets one key of three. Yours and Ficha's work as they do every day.

  6. Ficha shuts down

    The backup works without Ficha

    After verifying it's you, the backup company can sign with you to move your savings to another wallet.

Also in Vault.

  • Your savings aren't lost with you

    You name who should receive them if you're gone. While you're here, nothing changes.

  • Theft protection

    You choose how much can leave your Vault. Raising it takes days, with a warning each day, so you can stop it in time.

  • In and out, whenever you want

    Move it back to your Wallet when you need it, or send it from Vault to another wallet.

How you start.

You start with your Wallet. Whenever you want, you move your savings into Vault.

The first month is free. After that you pay monthly or yearly through the App Store or Google Play, and you see the price before you subscribe.

Sources

As of October 14, 2026. The Coldcard and Ledger cases are still under investigation, and their figures may change.

Reserve your Ficha.

Join the list and we'll write when we open.

Coming soon to iOS and Android. We'll write when we open, nothing else.

You're on the list. We'll write when we open.

We couldn't add you. Try again in a little while.