Ledger incident raises hardware wallet security concerns, OneKey founder says "last centimeter" protection will be upgraded

Odaily News: OneKey founder Yishi posted a statement saying that the recent asset loss incidents involving Ledger users have drawn community attention to the security of hardware wallets. The risk may not come from the secure chip itself, but rather from the gap between the protected chip and the display screen that users trust — the so-called "last centimeter." Hardware wallet security needs to cover the entire process of production, transportation, storage, and distribution. Users are advised to purchase devices through official channels, complete packaging inspections and official verification, as sensitive data may be exposed during transmission.

Yishi stated that as of October 10, OneKey has not received any reports of user fund losses caused by this incident. In response to supply chain attack risks, the company plans to make improvements across multiple areas, including packaging, mnemonic phrase display pathways, motherboard communication, reseller authorization, and user verification information. Among these, OneKey will introduce a backup process that does not require displaying the mnemonic phrase on the device screen, and will prioritize strengthening encryption of sensitive internal communication links on the motherboard to reduce the risk of hardware implant attacks obtaining recovery phrases.