Main Takeaway: Swapping crypto from a hardware wallet means your keys stay offline while a third-party liquidity provider handles the exchange. On the ELLIPAL Titan 2.0, the flow is visible end to end: the ELLIPAL App builds the swap transaction, the Titan 2.0 shows the real details on its 4.1-inch screen, you sign offline by QR code, and your phone broadcasts the result. At no point does a private key touch the internet, and at no point do you hand funds to a custodian while waiting. This guide walks through what actually happens behind a swap, step by step, and what to verify before you sign.
Quick reference
| Term | What it means |
|---|---|
| Swap | Exchanging one crypto asset for another through a liquidity provider, without a custodial exchange account |
| Liquidity provider | The third-party service that takes in one asset and sends back another at a quoted rate |
| Offline signing | The transaction is authorized inside the hardware wallet, which never connects to the internet |
| Slippage | The difference between the quoted rate and the executed rate, usually from market movement |
What actually happens when you swap from an ELLIPAL Titan 2.0
- You request a quote in the ELLIPAL App. The app queries integrated third-party swap providers and shows the rate, the fees, and the estimated amount you will receive.
- The app builds an unsigned transaction. This transaction sends your asset to the provider's deposit address. It is just data at this point. Nothing can move without a signature.
- The Titan 2.0 reads the transaction by QR code. The ELLIPAL App displays the unsigned transaction as a QR code, and the Titan 2.0 camera scans it. No cable, no Bluetooth, no network connection is involved.
- You verify on the 4.1-inch screen. The Titan 2.0 decodes and displays the real details: destination address, amount, network, and fee. This is the step where a tampered request would reveal itself, because the device shows what will actually execute, not what the app claimed.
- You sign offline. The private key signs inside the device and stays there. The signed transaction appears as a new QR code.
- Your phone broadcasts. The ELLIPAL App scans the signed QR and sends it to the network. The provider receives your asset, executes the exchange, and sends the new asset to your receive address, which you also control.
On the ELLIPAL X Card, the same flow runs with NFC: the card signs by tap after you verify the details on your phone, with the key sealed inside the card's CC EAL6+ secure element.
Why this beats swapping on an exchange
A custodial exchange swap requires depositing funds first, which means trusting the exchange's solvency, security, and withdrawal policy for the duration. A swap from cold storage never parks funds in an account: the only counterparty exposure is the minutes between your send and the provider's send, and your keys stay offline the whole time. The 2025-2026 run of exchange and protocol incidents made the difference concrete. See our security review.
It also beats browser-based swapping from a software wallet, where the key that authorizes everything lives on an internet-connected device. The Titan 2.0 moves that authorization into hardware that malware cannot reach, and the screen verification step means even a compromised app cannot silently reroute the destination.
What to check before you sign a swap
- The receive address is yours. The incoming asset should land on an address you control in the ELLIPAL App, not anywhere else.
- The destination on the device screen. Match what the Titan 2.0 shows against what the app quoted. The device screen is the source of truth.
- The network is right. Sending an asset on the wrong chain is the classic irreversible mistake.
- The rate and fees are acceptable. Quotes expire and rates move. A stale quote executes at current conditions within your slippage tolerance.
- Start small on a first swap. A test swap costs a small fee and confirms the whole path end to end.
FAQ
Do my keys ever go online during a swap?
No. On the ELLIPAL Titan 2.0 the private key is generated, stored, and used entirely inside the air-gapped device. Only the signed transaction, which is public information by design, travels to the network through your phone.
Who actually performs the exchange?
Independent third-party liquidity providers integrated into the ELLIPAL App. ELLIPAL does not hold your funds, set the rates, or execute the exchange itself. Provider availability, rates, and supported assets vary by region and asset.
What if the swap provider has a problem mid-swap?
Reputable providers complete or refund transactions that hit processing issues, and support runs through the provider. This is why the exposure window matters: unlike an exchange account, your funds are only in transit for minutes, and everything before and after sits on addresses you control.
Is swapping from cold storage slower than on an exchange?
The signing itself adds under a minute: scan, verify on the 4.1-inch screen, sign, scan back. The exchange leg takes the same network confirmation time it would anywhere. What you give up in seconds you get back by not having funds parked in a custodial account.
Can I swap from the ELLIPAL X Card too?
Yes. The X Card signs the same swap transactions by NFC tap, with verification on your phone and the key sealed in the card's CC EAL6+ secure element. Titan 2.0 for the vault, X Card for the day-to-day, one ELLIPAL App for both.
The trust layer
- Titan 2.0: air-gapped QR signing, clear signing on a 4.1-inch touchscreen, keys generated and stored offline
- X Card: NFC tap-to-sign, CC EAL6+ secure element, battery free, BIP39 portable
- Ecosystem: one ELLIPAL App, 10,000+ tokens across 40+ chains, integrated third-party swap providers
- Track record: air-gapped since 2018, 1 million+ users, 140+ countries, zero breaches across the air-gapped line
A swap from cold storage is not magic, it is just a well-ordered sequence: quote, build, verify on hardware, sign offline, broadcast. The ELLIPAL Titan 2.0 keeps your keys out of reach for the whole sequence, and the screen makes every step checkable. That is what swapping without giving up custody actually looks like.
Own it. Then use it.
Security note: No self-custody setup removes every risk. Swap services are provided by independent third parties. ELLIPAL is a self-custody hardware wallet company that does not custody funds, provide investment advice, or guarantee rates, execution, or returns, and service availability varies by region, asset, and provider. Verify every transaction on the device screen before signing, store your recovery phrase on a durable offline backup, and buy hardware from an official source. This article is general educational information as of 2026 and is not financial, investment, or custodial advice.