Go to app

1. Dual-Architecture Model

Published 7/22/2026, 7:10:15 PM

Telegram’s Gram wallet (formerly known as the TON wallet) is a dual-architecture system that is only partially non-custodial. While the TON Space (or DeFi Account) component is architecturally non-custodial, the default @wallet interface remains custodial. As of July 2026, the network's massive deployment to 1 billion users has been accompanied by a significant shift toward operational centralization, with Telegram officially taking over principal operating responsibilities for the network on May 4, 2026 [Source: https://coinmarketcap.com/community/articles/664367890123/].

1. Dual-Architecture Model

The "Gram wallet" is not a single product but a hybrid interface within Telegram. Users must explicitly opt into the non-custodial version to gain control over their private keys.

Feature@wallet (Default)TON Space / DeFi Account
Custody TypeCustodialNon-Custodial (Self-Custodial)
Key ManagementHeld by Telegram/The Open Platform (TOP)User holds private keys/seed phrase
ControlTelegram can freeze/seize fundsUser has total control
OnboardingInstant (linked to phone number)Requires seed phrase backup
KYC RequirementsTiered KYC (Basic/Plus/Maxi)No KYC for on-chain actions
Sourcewallet.tgwallet.tg

2. Technical Scale and Performance

To support a planned deployment to 1 billion users, the network underwent a major upgrade (Catchain 2.0) in April 2026. This upgrade reduced block times from ~2.5 seconds to 400 milliseconds, achieving sub-second finality [Source: https://tangem.com/en/blog/post/ton-blockchain-overview/].

  • Throughput: The network reportedly achieved testnet speeds of 104,715 TPS, though this specific figure has not been independently verified outside of project-linked reports [Note: not independently confirmed].
  • Transaction Costs: In May 2026, network fees were reduced by approximately 94%. The base fee is currently $0.0005, a move designed to make micro-transactions viable for a massive user base [Source: https://cryptobriefing.com/ton-network-fees-reduction/].
  • User Adoption: Despite the massive scale of Telegram, active non-custodial usage remains low. As of mid-2026, there are approximately 1.78 million monthly active wallets, representing only 0.12% of Telegram's total monthly active users [Source: https://www.tradingview.com/news/chainwire:96b073f7736e:0/].

3. Governance and Centralization Risks

The claim of being "truly non-custodial" is challenged by the high degree of operational and governance centralization:

  • Validator Dominance: Telegram is currently the network's largest validator, staking approximately 2.2 million GRAM [Source: https://coinmarketcap.com/community/articles/664367890123/].
  • Institutional Control: On May 4, 2026, Telegram officially assumed the TON Foundation's principal operating responsibilities, effectively merging the network's development with the corporate entity [Source: https://coinmarketcap.com/community/articles/664367890123/].
  • Geofencing: The non-custodial TON Space remains unavailable to US users due to regulatory restrictions, indicating that the "non-custodial" nature does not bypass jurisdictional controls [Source: https://wallet.tg].

4. Economic and Security Considerations

  • Supply Shock: A significant economic event is scheduled for February 21, 2027, when 1,081 million GRAM (formerly Toncoin) will be released from a "whale freeze," potentially impacting the stability of the assets held in these wallets [Source: https://ton.org/en/analysis/tokenomics-2026/].
  • Human Factor: The push for 1 billion users to adopt self-custody carries the risk of massive fund loss due to lost seed phrases. For non-technical users, the "non-custodial" claim means there is no "forgot password" option, leading to irreversibly lost funds if recovery phrases are misplaced.

Conclusion: While the Gram wallet offers a technically non-custodial option via TON Space, the ecosystem is operationally centralized under Telegram's direct management. For the vast majority of the 1 billion users, the experience remains custodial by default, and the network's security is heavily dependent on Telegram's role as the primary validator.