OneKey founder Yishi said recent asset loss incidents involving Ledger users have drawn community attention to hardware wallet security. According to Odaily, he said the risk may lie not in the secure chip itself, but in the so-called "last inch" between the protected chip and the user-trusted display.
Yishi said hardware wallet security should cover the full process of production, transportation, storage, and distribution. He advised users to buy devices through official channels, inspect the packaging, and complete official verification, adding that sensitive data may be exposed during transmission. As of October 10, OneKey had not received any reports of user losses linked to the incident.
He said OneKey plans to improve protections against supply-chain attacks across packaging, the mnemonic display path, motherboard communication, dealer authorization, and user verification information. The company will also introduce a backup process that does not display the mnemonic phrase on the device screen and will prioritize encryption for sensitive internal motherboard communication links to reduce the risk of hardware implants obtaining recovery phrases.
