News Heat Trend
Project Overview
OneKey is an open-source cryptocurrency wallet that allows users to securely and conveniently store and use their crypto assets.
Kraken briefly experienced trading and withdrawal outages, official says issue resolved
community users noticed Kraken experienced a period earlier where trading or withdrawals were unavailable.Kraken officially posted at 10:42 announcing: "We are investigating an issue affecting spot and derivatives clients connecting to the platform and submitting orders through all web, mobile applications, and REST and WebSocket connections. We are working to resolve the issue and will provide updates as more information becomes available."At 11:42, Kraken posted another update on progress, stating the issue had been resolved.OneKey founder Yishi commented on the matter: "Looks like Kraken had an issue just now too. Trading and withdrawals were unavailable, and the entire exchange went into 'post-only' mode. It's recovered now, but it really gave me a scare. Right now, attacking is far easier than defending. We must devote all our efforts to security. Full 'fortress mode' engaged."
OneKey Founder: Actively Strengthening Existing Security Measures, Reducing Customer Data Retention Period to 30 Days
Odaily Report: OneKey founder Yishi posted that after a series of data breaches and supply chain attacks in the hardware wallet industry recently, OneKey is strengthening its existing security measures, stating that it has not experienced any security incidents and that these measures are being implemented proactively. OneKey has confirmed through the Shopify API that personal information such as customer names, emails, and shipping addresses in historical order records has been deleted, and has reduced the customer data retention period to a maximum of 30 days. Returns, warranties, and device verification will switch to methods that do not rely on long-term data retention. The retention policies of carriers such as FedEx and UPS are not controlled by OneKey; with customers' explicit consent, OneKey may separately retain privacy-processed email addresses solely for product updates and security patch notifications. OneKey's long-term goal is to migrate its e-commerce operations to its own infrastructure and reduce dependence on third-party platforms such as Shopify.
OneKey Founder: You Can Use an iPhone as a Cold Wallet, But Only iPhone 17 or Newer Models Are Recommended
Odaily News: OneKey founder Yishi posted on X platform "How to Turn an iPhone into a Cold Wallet."Yishi stated: "I recommend using an iPhone 17 or newer, running iOS 27 or higher, and replacing the device with a new one every one to two years... I would not use an iPhone 16 or earlier as a device for long-term signing of important asset transactions. Even an iPhone 17 with iOS 27 is only the minimum configuration I can currently accept. For long-term custody of large amounts of funds, I prefer to use a dedicated signing device, which should have a transparent security design and be capable of continuous maintenance and on-device transaction verification. Its firmware, supply chain, and recovery process still require further review. Keeping the phone offline is a precautionary measure. But factors such as hardware, patch level, BFU/AFU status, passcode, and wallet key management determine the actual effectiveness of this precaution."
Investigator estimates related losses exceed $86 million, OneKey terminates partnership with CryptoBilis and offers free replacements
Odaily News: Bitcoin News posted on X that OneKey has terminated its partnership with reseller CryptoBilis and is offering free replacements after Ledger confirmed that devices sold through this reseller contained unauthorized hardware implants. Blockchain investigator Specter estimates related losses exceed $86 million. Ledger has not yet confirmed the total losses and stated that confirmed cases involve only CryptoBilis inventory, not its own channels. OneKey CEO Yishi Wang said no users have reported losses so far, but user asset security cannot rely on luck.
OneKey terminates its partnership with CryptoBilis and offers free replacements for select purchasers.
OneKey founder Yishi posted on X that, following recent reports of asset theft from multiple users who had purchased Ledger hardware wallets from CryptoBilis, OneKey has revoked CryptoBilis's status as an authorized dealer, ceased adding new dealers, and will conduct a comprehensive review of all existing distributors.
OneKey Founder: CryptoBilis Dealer Authorization Terminated, Free Replacements Offered for CryptoBilis Channel Users
OneKey founder Yishi posted on X platform that in response to recent incidents where Ledger hardware wallets purchased by some users through CryptoBilis were found to have unauthorized hardware implanted, leading to asset theft, OneKey has not yet received any reports of its own users experiencing asset theft as a result. However, out of security concerns, OneKey has terminated CryptoBilis's authorized dealer status.OneKey also announced that it will immediately stop accepting new dealers and will re-conduct qualification reviews for all existing authorized dealers. Additionally, for users who purchased OneKey hardware wallets through CryptoBilis between March 1, 2026 and the date of this statement, regardless of device model or usage status, they may apply for a free replacement. The application deadline is December 31, 2026.Furthermore, Yishi advised users who have already used the affected devices to treat their original seed phrases as potentially compromised and to transfer their assets to wallets using new seed phrases as soon as possible, without waiting for replacement devices to arrive.
OnKey Founder: iPhone 11 and Earlier Models Have Hardware Vulnerabilities That Cannot Be Fixed via System Updates, Not Recommended for Storing Mnemonics
Odaily reports: OnKey founder Yishi posted a warning on X platform that using older iPhones as cold wallets for crypto assets may pose security risks. iPhone 4S through iPhone X are affected by the checkm8 vulnerability in BootROM, and the usbliter8 vulnerability disclosed in June this year affects iPhone XS, XR, 11 series, and second-generation SE, all of which involve low-level boot code that cannot be fixed through iOS system updates. After gaining physical access to a device, attackers can execute code via the USB interface before iOS boots, and airplane mode cannot prevent such attacks.Yishi recommends against using iPhone 11 and earlier models for storing mnemonics. Users who have already used such devices to store mnemonics should generate entirely new mnemonics in a trusted environment and migrate their assets, rather than merely changing the wallet address under the original mnemonic. In addition, users should promptly update their systems, use more complex device and wallet passwords, avoid charging via public USB ports, and remain vigilant against physical attacks during periods when the device is out of their control for extended periods.Previously, OneKey founder Yishi had posted on X platform recommending users use iPhone as a cold wallet, but only recommended iPhone 17 or newer models.
OneKey Founder: IBIT Could Become Target of North Korean Cyberattacks, Coinbase's Single-Custody Model Raises Security Concerns
OneKey founder Yishi issued a warning that as Bitcoin ETF holdings increase, the security risks faced by custodians are also rising, and noted that BlackRock's spot Bitcoin ETF (IBIT) could become a potential target for North Korean hacking groups. The post states that TRM Labs is highly confident the recent Binance security breach is linked to the North Korean hacking group TraderTraitor, which has previously been implicated in the Bybit hack and the DMM Bitcoin theft.
Kraken briefly experienced trading and withdrawal outages, official says issue resolved
community users noticed Kraken experienced a period earlier where trading or withdrawals were unavailable.Kraken officially posted at 10:42 announcing: "We are investigating an issue affecting spot and derivatives clients connecting to the platform and submitting orders through all web, mobile applications, and REST and WebSocket connections. We are working to resolve the issue and will provide updates as more information becomes available."At 11:42, Kraken posted another update on progress, stating the issue had been resolved.OneKey founder Yishi commented on the matter: "Looks like Kraken had an issue just now too. Trading and withdrawals were unavailable, and the entire exchange went into 'post-only' mode. It's recovered now, but it really gave me a scare. Right now, attacking is far easier than defending. We must devote all our efforts to security. Full 'fortress mode' engaged."
OneKey Founder: Actively Strengthening Existing Security Measures, Reducing Customer Data Retention Period to 30 Days
Odaily Report: OneKey founder Yishi posted that after a series of data breaches and supply chain attacks in the hardware wallet industry recently, OneKey is strengthening its existing security measures, stating that it has not experienced any security incidents and that these measures are being implemented proactively. OneKey has confirmed through the Shopify API that personal information such as customer names, emails, and shipping addresses in historical order records has been deleted, and has reduced the customer data retention period to a maximum of 30 days. Returns, warranties, and device verification will switch to methods that do not rely on long-term data retention. The retention policies of carriers such as FedEx and UPS are not controlled by OneKey; with customers' explicit consent, OneKey may separately retain privacy-processed email addresses solely for product updates and security patch notifications. OneKey's long-term goal is to migrate its e-commerce operations to its own infrastructure and reduce dependence on third-party platforms such as Shopify.
OneKey terminates its partnership with CryptoBilis and offers free replacements for select purchasers.
OneKey founder Yishi posted on X that, following recent reports of asset theft from multiple users who had purchased Ledger hardware wallets from CryptoBilis, OneKey has revoked CryptoBilis's status as an authorized dealer, ceased adding new dealers, and will conduct a comprehensive review of all existing distributors.
OneKey Founder: CryptoBilis Dealer Authorization Terminated, Free Replacements Offered for CryptoBilis Channel Users
OneKey founder Yishi posted on X platform that in response to recent incidents where Ledger hardware wallets purchased by some users through CryptoBilis were found to have unauthorized hardware implanted, leading to asset theft, OneKey has not yet received any reports of its own users experiencing asset theft as a result. However, out of security concerns, OneKey has terminated CryptoBilis's authorized dealer status.OneKey also announced that it will immediately stop accepting new dealers and will re-conduct qualification reviews for all existing authorized dealers. Additionally, for users who purchased OneKey hardware wallets through CryptoBilis between March 1, 2026 and the date of this statement, regardless of device model or usage status, they may apply for a free replacement. The application deadline is December 31, 2026.Furthermore, Yishi advised users who have already used the affected devices to treat their original seed phrases as potentially compromised and to transfer their assets to wallets using new seed phrases as soon as possible, without waiting for replacement devices to arrive.
OnKey Founder: iPhone 11 and Earlier Models Have Hardware Vulnerabilities That Cannot Be Fixed via System Updates, Not Recommended for Storing Mnemonics
Odaily reports: OnKey founder Yishi posted a warning on X platform that using older iPhones as cold wallets for crypto assets may pose security risks. iPhone 4S through iPhone X are affected by the checkm8 vulnerability in BootROM, and the usbliter8 vulnerability disclosed in June this year affects iPhone XS, XR, 11 series, and second-generation SE, all of which involve low-level boot code that cannot be fixed through iOS system updates. After gaining physical access to a device, attackers can execute code via the USB interface before iOS boots, and airplane mode cannot prevent such attacks.Yishi recommends against using iPhone 11 and earlier models for storing mnemonics. Users who have already used such devices to store mnemonics should generate entirely new mnemonics in a trusted environment and migrate their assets, rather than merely changing the wallet address under the original mnemonic. In addition, users should promptly update their systems, use more complex device and wallet passwords, avoid charging via public USB ports, and remain vigilant against physical attacks during periods when the device is out of their control for extended periods.Previously, OneKey founder Yishi had posted on X platform recommending users use iPhone as a cold wallet, but only recommended iPhone 17 or newer models.
Kraken briefly experienced trading and withdrawal outages, official says issue resolved
community users noticed Kraken experienced a period earlier where trading or withdrawals were unavailable.Kraken officially posted at 10:42 announcing: "We are investigating an issue affecting spot and derivatives clients connecting to the platform and submitting orders through all web, mobile applications, and REST and WebSocket connections. We are working to resolve the issue and will provide updates as more information becomes available."At 11:42, Kraken posted another update on progress, stating the issue had been resolved.OneKey founder Yishi commented on the matter: "Looks like Kraken had an issue just now too. Trading and withdrawals were unavailable, and the entire exchange went into 'post-only' mode. It's recovered now, but it really gave me a scare. Right now, attacking is far easier than defending. We must devote all our efforts to security. Full 'fortress mode' engaged."
OneKey Founder: Actively Strengthening Existing Security Measures, Reducing Customer Data Retention Period to 30 Days
Odaily Report: OneKey founder Yishi posted that after a series of data breaches and supply chain attacks in the hardware wallet industry recently, OneKey is strengthening its existing security measures, stating that it has not experienced any security incidents and that these measures are being implemented proactively. OneKey has confirmed through the Shopify API that personal information such as customer names, emails, and shipping addresses in historical order records has been deleted, and has reduced the customer data retention period to a maximum of 30 days. Returns, warranties, and device verification will switch to methods that do not rely on long-term data retention. The retention policies of carriers such as FedEx and UPS are not controlled by OneKey; with customers' explicit consent, OneKey may separately retain privacy-processed email addresses solely for product updates and security patch notifications. OneKey's long-term goal is to migrate its e-commerce operations to its own infrastructure and reduce dependence on third-party platforms such as Shopify.
OneKey Founder: You Can Use an iPhone as a Cold Wallet, But Only iPhone 17 or Newer Models Are Recommended
Odaily News: OneKey founder Yishi posted on X platform "How to Turn an iPhone into a Cold Wallet."Yishi stated: "I recommend using an iPhone 17 or newer, running iOS 27 or higher, and replacing the device with a new one every one to two years... I would not use an iPhone 16 or earlier as a device for long-term signing of important asset transactions. Even an iPhone 17 with iOS 27 is only the minimum configuration I can currently accept. For long-term custody of large amounts of funds, I prefer to use a dedicated signing device, which should have a transparent security design and be capable of continuous maintenance and on-device transaction verification. Its firmware, supply chain, and recovery process still require further review. Keeping the phone offline is a precautionary measure. But factors such as hardware, patch level, BFU/AFU status, passcode, and wallet key management determine the actual effectiveness of this precaution."
OneKey Founder: CryptoBilis Dealer Authorization Terminated, Free Replacements Offered for CryptoBilis Channel Users
OneKey founder Yishi posted on X platform that in response to recent incidents where Ledger hardware wallets purchased by some users through CryptoBilis were found to have unauthorized hardware implanted, leading to asset theft, OneKey has not yet received any reports of its own users experiencing asset theft as a result. However, out of security concerns, OneKey has terminated CryptoBilis's authorized dealer status.OneKey also announced that it will immediately stop accepting new dealers and will re-conduct qualification reviews for all existing authorized dealers. Additionally, for users who purchased OneKey hardware wallets through CryptoBilis between March 1, 2026 and the date of this statement, regardless of device model or usage status, they may apply for a free replacement. The application deadline is December 31, 2026.Furthermore, Yishi advised users who have already used the affected devices to treat their original seed phrases as potentially compromised and to transfer their assets to wallets using new seed phrases as soon as possible, without waiting for replacement devices to arrive.
Ledger incident raises hardware wallet security concerns, OneKey founder says "last centimeter" protection will be upgraded
Odaily News: OneKey founder Yishi posted a statement saying that the recent asset loss incidents involving Ledger users have drawn community attention to the security of hardware wallets. The risk may not come from the secure chip itself, but rather from the gap between the protected chip and the display screen that users trust — the so-called "last centimeter." Hardware wallet security needs to cover the entire process of production, transportation, storage, and distribution. Users are advised to purchase devices through official channels, complete packaging inspections and official verification, as sensitive data may be exposed during transmission.Yishi stated that as of October 10, OneKey has not received any reports of user fund losses caused by this incident. In response to supply chain attack risks, the company plans to make improvements across multiple areas, including packaging, mnemonic phrase display pathways, motherboard communication, reseller authorization, and user verification information. Among these, OneKey will introduce a backup process that does not require displaying the mnemonic phrase on the device screen, and will prioritize strengthening encryption of sensitive internal communication links on the motherboard to reduce the risk of hardware implant attacks obtaining recovery phrases.
Related news
OnKey Founder: iPhone 11 and Earlier Models Have Hardware Vulnerabilities That Cannot Be Fixed via System Updates, Not Recommended for Storing Mnemonics
Odaily reports: OnKey founder Yishi posted a warning on X platform that using older iPhones as cold wallets for crypto assets may pose security risks. iPhone 4S through iPhone X are affected by the checkm8 vulnerability in BootROM, and the usbliter8 vulnerability disclosed in June this year affects iPhone XS, XR, 11 series, and second-generation SE, all of which involve low-level boot code that cannot be fixed through iOS system updates. After gaining physical access to a device, attackers can execute code via the USB interface before iOS boots, and airplane mode cannot prevent such attacks.Yishi recommends against using iPhone 11 and earlier models for storing mnemonics. Users who have already used such devices to store mnemonics should generate entirely new mnemonics in a trusted environment and migrate their assets, rather than merely changing the wallet address under the original mnemonic. In addition, users should promptly update their systems, use more complex device and wallet passwords, avoid charging via public USB ports, and remain vigilant against physical attacks during periods when the device is out of their control for extended periods.Previously, OneKey founder Yishi had posted on X platform recommending users use iPhone as a cold wallet, but only recommended iPhone 17 or newer models.
OneKey Founder: IBIT Could Become Target of North Korean Cyberattacks, Coinbase's Single-Custody Model Raises Security Concerns
OneKey founder Yishi issued a warning that as Bitcoin ETF holdings increase, the security risks faced by custodians are also rising, and noted that BlackRock's spot Bitcoin ETF (IBIT) could become a potential target for North Korean hacking groups. The post states that TRM Labs is highly confident the recent Binance security breach is linked to the North Korean hacking group TraderTraitor, which has previously been implicated in the Bybit hack and the DMM Bitcoin theft.
Kraken briefly experienced trading and withdrawal outages, official says issue resolved
community users noticed Kraken experienced a period earlier where trading or withdrawals were unavailable.Kraken officially posted at 10:42 announcing: "We are investigating an issue affecting spot and derivatives clients connecting to the platform and submitting orders through all web, mobile applications, and REST and WebSocket connections. We are working to resolve the issue and will provide updates as more information becomes available."At 11:42, Kraken posted another update on progress, stating the issue had been resolved.OneKey founder Yishi commented on the matter: "Looks like Kraken had an issue just now too. Trading and withdrawals were unavailable, and the entire exchange went into 'post-only' mode. It's recovered now, but it really gave me a scare. Right now, attacking is far easier than defending. We must devote all our efforts to security. Full 'fortress mode' engaged."
OneKey Founder: Actively Strengthening Existing Security Measures, Reducing Customer Data Retention Period to 30 Days
Odaily Report: OneKey founder Yishi posted that after a series of data breaches and supply chain attacks in the hardware wallet industry recently, OneKey is strengthening its existing security measures, stating that it has not experienced any security incidents and that these measures are being implemented proactively. OneKey has confirmed through the Shopify API that personal information such as customer names, emails, and shipping addresses in historical order records has been deleted, and has reduced the customer data retention period to a maximum of 30 days. Returns, warranties, and device verification will switch to methods that do not rely on long-term data retention. The retention policies of carriers such as FedEx and UPS are not controlled by OneKey; with customers' explicit consent, OneKey may separately retain privacy-processed email addresses solely for product updates and security patch notifications. OneKey's long-term goal is to migrate its e-commerce operations to its own infrastructure and reduce dependence on third-party platforms such as Shopify.
OneKey Founder: SafeOS is Built on FreeRTOS, Compatibility to Continue Expanding
OneKey founder Yishi stated in a post that OneKey's SafeOS is built on FreeRTOS and independently developed by the team. OneKey will always focus on portable security devices, providing additional offline hardware security protection for real-world assets (RWA), crypto assets, as well as FIDO keys and two-factor authentication (2FA). Yishi also emphasized that OneKey will serve as a universal accessory for iPhone and Mac, allowing users to pair OneKey with wallets such as BlueWallet, Sparrow, Rabby, OKX Wallet, MetaMask, Electrum, and more. The team will continue to expand its compatibility range.
OneKey Launches Hardware Wallet Inspection Tool "One-Stone Package Inspector", Leveraging Vision Models to Detect Anomalous Components
OneKey founder Yishi announced the launch of the hardware wallet authentication tool "Yi Shi Jian Bao", designed to help users identify potentially anomalous implants on hardware device motherboards. The tool applies uniform verification rules to Ledger, OneKey, and Trezor without preferential treatment. After users upload photos of their disassembled motherboards, the system locally strips metadata such as geolocation information, then utilizes Anthropic’s Claude vision model to analyze motherboard model matching, main chip markings, and the presence of anomalous chips, modules, antennas, or jumper wires. The final verdict is generated based on predefined rules rather than the model making a direct determination.