News linked to both this project and an event.
community users noticed Kraken experienced a period earlier where trading or withdrawals were unavailable.Kraken officially posted at 10:42 announcing: "We are investigating an issue affecting spot and derivatives clients connecting to the platform and submitting orders through all web, mobile applications, and REST and WebSocket connections. We are working to resolve the issue and will provide updates as more information becomes available."At 11:42, Kraken posted another update on progress, stating the issue had been resolved.OneKey founder Yishi commented on the matter: "Looks like Kraken had an issue just now too. Trading and withdrawals were unavailable, and the entire exchange went into 'post-only' mode. It's recovered now, but it really gave me a scare. Right now, attacking is far easier than defending. We must devote all our efforts to security. Full 'fortress mode' engaged."
Odaily Report: OneKey founder Yishi posted that after a series of data breaches and supply chain attacks in the hardware wallet industry recently, OneKey is strengthening its existing security measures, stating that it has not experienced any security incidents and that these measures are being implemented proactively. OneKey has confirmed through the Shopify API that personal information such as customer names, emails, and shipping addresses in historical order records has been deleted, and has reduced the customer data retention period to a maximum of 30 days. Returns, warranties, and device verification will switch to methods that do not rely on long-term data retention. The retention policies of carriers such as FedEx and UPS are not controlled by OneKey; with customers' explicit consent, OneKey may separately retain privacy-processed email addresses solely for product updates and security patch notifications. OneKey's long-term goal is to migrate its e-commerce operations to its own infrastructure and reduce dependence on third-party platforms such as Shopify.
Odaily News: OneKey founder Yishi posted on X platform "How to Turn an iPhone into a Cold Wallet."Yishi stated: "I recommend using an iPhone 17 or newer, running iOS 27 or higher, and replacing the device with a new one every one to two years... I would not use an iPhone 16 or earlier as a device for long-term signing of important asset transactions. Even an iPhone 17 with iOS 27 is only the minimum configuration I can currently accept. For long-term custody of large amounts of funds, I prefer to use a dedicated signing device, which should have a transparent security design and be capable of continuous maintenance and on-device transaction verification. Its firmware, supply chain, and recovery process still require further review. Keeping the phone offline is a precautionary measure. But factors such as hardware, patch level, BFU/AFU status, passcode, and wallet key management determine the actual effectiveness of this precaution."
Odaily News: Bitcoin News posted on X that OneKey has terminated its partnership with reseller CryptoBilis and is offering free replacements after Ledger confirmed that devices sold through this reseller contained unauthorized hardware implants. Blockchain investigator Specter estimates related losses exceed $86 million. Ledger has not yet confirmed the total losses and stated that confirmed cases involve only CryptoBilis inventory, not its own channels. OneKey CEO Yishi Wang said no users have reported losses so far, but user asset security cannot rely on luck.
OneKey founder Yishi posted on X that, following recent reports of asset theft from multiple users who had purchased Ledger hardware wallets from CryptoBilis, OneKey has revoked CryptoBilis's status as an authorized dealer, ceased adding new dealers, and will conduct a comprehensive review of all existing distributors.
OneKey founder Yishi posted on X platform that in response to recent incidents where Ledger hardware wallets purchased by some users through CryptoBilis were found to have unauthorized hardware implanted, leading to asset theft, OneKey has not yet received any reports of its own users experiencing asset theft as a result. However, out of security concerns, OneKey has terminated CryptoBilis's authorized dealer status.OneKey also announced that it will immediately stop accepting new dealers and will re-conduct qualification reviews for all existing authorized dealers. Additionally, for users who purchased OneKey hardware wallets through CryptoBilis between March 1, 2026 and the date of this statement, regardless of device model or usage status, they may apply for a free replacement. The application deadline is December 31, 2026.Furthermore, Yishi advised users who have already used the affected devices to treat their original seed phrases as potentially compromised and to transfer their assets to wallets using new seed phrases as soon as possible, without waiting for replacement devices to arrive.
Odaily News - Hardware wallet maker BitBox reports that credit card sales in August grew roughly 10x compared to the baseline of previous weeks, with the increase primarily driven by North America. Trezor and OneKey also confirmed rising sales during the same period, though neither disclosed specific figures.Trezor, BitBox, and OneKey have all re-reviewed their seed phrase generation, random number generator, entropy, and firmware verification processes. Trezor plans to conduct penetration testing on core firmware functions and publish related security audit reports. OneKey will strengthen reviews of security-critical code paths and transaction signing processes.Ledger CTO Charles Guillemet stated that AI-assisted attacks mean patch releases, vulnerability disclosures, and user education need to accelerate. Blockstream Jade has released a firmware update containing multiple fixes and recommends users simultaneously update their apps, operating systems, devices, routers, and home appliances. (Bitcoin.com News)