Hacks & Exploits
OneKey Terminates Partnership with CryptoBilis, Offers Free Wallet Replacements
OneKey has officially cut its partnership with CryptoBilis, a Southeast Asian reseller, following serious allegations regarding tampered Ledger hardware wallets sold through that channel. This decision comes in light of reports indicating that these compromised devices were associated with large-scale cryptocurrency thefts.
As part of its response, OneKey is offering free replacement devices to customers who purchased any OneKey model from CryptoBilis between March 1 and October 12, 2026. This initiative includes both new and used devices, allowing buyers until December 31, 2026, to apply for a replacement. Notably, customers are not required to return their original devices.
OneKey's founder, Yishi Wang, emphasized that while there have been no reports of users losing funds, the company is treating all devices sold through CryptoBilis as potentially compromised. This caution follows Ledger's confirmation that unauthorized implants were found in devices sold by CryptoBilis, which has led to estimated losses of between $86 million and $93.2 million across multiple wallets in Southeast Asia.
In addition to the replacement program, OneKey has paused the onboarding of new resellers and is currently reviewing its existing dealer network. Wang stated that the security of users' assets cannot rely on luck and urged customers to treat their recovery phrases as potentially exposed, recommending they move their assets to a newly generated wallet immediately.
FAQ
What prompted OneKey to terminate its partnership with CryptoBilis?
OneKey terminated its partnership with CryptoBilis due to serious allegations regarding tampered Ledger hardware wallets sold through that channel, which were linked to large-scale cryptocurrency thefts.
What is OneKey offering to customers who purchased devices from CryptoBilis?
OneKey is offering free replacement devices to customers who purchased any OneKey model from CryptoBilis between March 1 and October 12, 2026. Customers can apply for a replacement until December 31, 2026.
Do customers need to return their original devices to receive a replacement?
No, customers are not required to return their original devices to receive a replacement.
What should customers do with their recovery phrases?
Customers are advised to treat their recovery phrases as potentially exposed and should move their assets to a newly generated wallet immediately.
What actions is OneKey taking in response to the situation?
In addition to the replacement program, OneKey has paused the onboarding of new resellers and is reviewing its existing dealer network to ensure the security of users' assets.