Traditional hardware wallets rely on anti-tamper labels to prevent supply chain attacks. However, once the protective label is removed, the device loses its protection against malicious firmware re-flashing. If the device is stolen and flashed with malicious firmware, critical data such as user PIN codes can be compromised, leading to data leaks and asset loss. EyeWallet’s iris collection module on the device side uses a high-security level encryption chip. Illegitimate firmware cannot access it, making it impossible to collect user iris information. Even if attackers re-flash the firmware, they cannot steal the user’s private key.