Ambire Ice Flags Safe Account Control Changes Before Hardware Signing

Ambire announced Ice on Oct. 30, a hardware signing device for Ambire and Safe accounts that shows transaction activity and flags changes that can affect who controls an account.

Ice displays transfers, token approvals and batched actions. It also warns signers when a transaction changes a Safe’s owners, signature threshold or modules. Those alerts bring account-control changes into view alongside the transaction’s other actions.

A Safe’s owners are the accounts authorized to sign. Its threshold sets the minimum number of confirmations needed for a transaction to execute. A transaction can change either setting without moving tokens, while changing who can approve later activity.

Modules can add functions such as recurring payments, spending limits and recovery tools. They can also create a route for executing transactions outside Safe’s core multisignature process. A malicious module could take control of a Safe, making module changes a consequential part of account security.

Ice supports USB, Bluetooth and QR signing. QR mode is designed for offline signing. The device’s hardware and firmware are open source, and it uses NXP and Infineon secure elements.

Ambire offered its first 200 devices for $119, with a $10 nonrefundable deposit; the listed full price was $159. That first batch was sold out as of Nov. 2. A second batch of 200 was listed at $159, also with a $10 deposit, and delivery was expected within six months.

Ambire’s launch announcement had projected shipping to begin in early 2027. The current product listing gives a delivery estimate of within six months.