OneKey Ends CryptoBilis Deal After Wallet Tampering

OneKey has ended CryptoBilis’s authorised reseller status after Ledger confirmed unauthorised hardware implants in wallets sold through the Southeast Asian seller. OneKey is offering free replacement devices to customers who bought through CryptoBilis from March 1 to October 12, 2026; applications close December 31, and customers do not need to return their original wallets. The programme replaces devices, not stolen funds. OneKey says it has received no reports of user losses, but is treating all CryptoBilis-distributed devices as potentially suspect, auditing existing partners and pausing new reseller onboarding. Blockchain investigator Specter estimated related losses at more than $86 million; an earlier preliminary estimate put the figure at $86 million to $93.2 million. Ledger has not confirmed a total and cautions that not all reported thefts are linked to tampering. It said confirmed cases involved CryptoBilis inventory, not Ledger’s own sales channels. OneKey founder and CEO Yishi Wang advised anyone who may have used a compromised device to assume their recovery phrase could be exposed and move funds to a newly generated wallet. The incident highlights hardware wallet supply-chain risks, while the loss estimates remain unverified.
Neutral
The reports do not identify a direct effect on the price of any cryptocurrency. The immediate consequences concern wallet users, device replacements and confidence in hardware-wallet supply chains, rather than the fundamentals or trading activity of a specific token. In the short term, the incident could prompt affected users to move assets and traders to watch for wider security concerns, but the reported losses are not confirmed and are not attributed to a particular cryptocurrency. Over the longer term, stronger reseller audits and safer wallet practices may help address supply-chain risks. On the available information, a neutral price impact for cryptocurrencies is most appropriate.