OneKey issued an official statement today: it has revoked the authorization of Southeast Asian distributor CryptoBilis, suspended approval of new distributors, and will review all existing distributors. It will also publish a complete list of authorized distributors.
A bit of background for anyone who missed it: a few days ago, Ledger confirmed that unauthorized hardware had been implanted in devices sold through CryptoBilis. More than 300 wallets were stolen, with third parties estimating losses of $86 million to $93 million. Tether has frozen around $10 million in related USDT. This is now the largest hardware wallet supply chain attack in crypto history.
One interesting detail: OneKey explicitly said it has not received any reports of users losing funds so far. But the founder’s exact words were, “No reports doesn’t mean there’s no risk.” They’re treating the risk as real: anyone who bought a OneKey device through CryptoBilis between March 1 and October 12 can get a free replacement, regardless of model or whether it has been used. Applications must be submitted by December 31.
My personal take: this is escalating from an incident involving a single company into a trust crisis for the entire hardware wallet industry. People used to assume “hardware wallet = absolutely secure,” but now we’re seeing that the supply chain may be more vulnerable than the chips themselves. OneKey’s move effectively blows up and rebuilds its distributor network—a model for the industry, in a way. Now we’ll see whether manufacturers like Trezor and SafePal, which were also on CryptoBilis’s shelves, follow suit.
⚠️ Risk warning: If you have a hardware wallet bought through a third-party distributor, don’t wait for a replacement. Transfer your assets to a wallet with a new seed phrase first.
Did you buy your hardware wallet directly from the official store, or through a distributor? Share in the comments—see you there.
$BTC $ETH
#硬件钱包 #安全 #CryptoSecurity
A bit of background for anyone who missed it: a few days ago, Ledger confirmed that unauthorized hardware had been implanted in devices sold through CryptoBilis. More than 300 wallets were stolen, with third parties estimating losses of $86 million to $93 million. Tether has frozen around $10 million in related USDT. This is now the largest hardware wallet supply chain attack in crypto history.
One interesting detail: OneKey explicitly said it has not received any reports of users losing funds so far. But the founder’s exact words were, “No reports doesn’t mean there’s no risk.” They’re treating the risk as real: anyone who bought a OneKey device through CryptoBilis between March 1 and October 12 can get a free replacement, regardless of model or whether it has been used. Applications must be submitted by December 31.
My personal take: this is escalating from an incident involving a single company into a trust crisis for the entire hardware wallet industry. People used to assume “hardware wallet = absolutely secure,” but now we’re seeing that the supply chain may be more vulnerable than the chips themselves. OneKey’s move effectively blows up and rebuilds its distributor network—a model for the industry, in a way. Now we’ll see whether manufacturers like Trezor and SafePal, which were also on CryptoBilis’s shelves, follow suit.
⚠️ Risk warning: If you have a hardware wallet bought through a third-party distributor, don’t wait for a replacement. Transfer your assets to a wallet with a new seed phrase first.
Did you buy your hardware wallet directly from the official store, or through a distributor? Share in the comments—see you there.
$BTC $ETH
#硬件钱包 #安全 #CryptoSecurity