We get asked this a lot: “How do I know my hardware wallet hasn’t been tampered with before it gets to me?” Between the factory and your door, a wallet spends time in warehouses and in transit. Packaging is only one part of preventing supply chain attacks, but it matters. It helps you check for signs of tampering when the wallet arrives. That’s why we’ve put a lot of work into ours. OneKey has four layers of protection: 1. Clear shrink wrap around the whole box. 2. A destructible seal on the box that breaks when removed. 3. A holographic tamper-evident seal on the device that shows “VOID” when peeled off. 4. Device authentication in the official OneKey App, plus firmware signature checks by the Secure Element (SE). Our manufacturer is in the same tier as those making Apple and Google Pixel devices. To enter the factory, you have to pass through multiple gates and three security checks, sign in, and verify your identity. All phones and other communication devices have to be handed over and kept in lockers. There are cameras throughout the factory. There’s still a lot more to do. We’ll keep tightening security and improving these measures.

After the recent Ledger incident, I wrote about how hardware implants can steal a recovery phrase without breaking the secure chip, what remains unconfirmed, and the changes we're making at OneKey.

we hacked ledger. the @OneKey_Anzen team has successfully reproduced a transaction replacement attack against ledger ethereum app 1.22.1 in our lab. the bug is a race condition between the transaction display logic and the underlying transaction buffer. an attacker can overwrite the transaction waiting to be signed while the user is still reviewing a legitimate one. in simple terms: - you see transaction a on your ledger. - you approve transaction a. - your ledger can end up signing transaction b. - and you never see transaction b. to reproduce this, we built the 1.22.1 ELF ourselves, fixed the speculos reset 502 issue, and got the full attack flow working end to end. ledger fixed this in ethereum app 1.22.3. if you’re still on an older version, update it.

eight months ago, i handed my boss @cz_binance the prototype. he said, “keep going, make it great.” today, in bhutan, i finally handed him the new one. pretty proud to say i think we’ve built the best hardware wallet experience in the world. hope he likes it hehe. the team won’t let me leak a single detail yet, so that’s all i can say for now. but give us a little more time. i think you’ll be meeting it very soon :)

just built a small open source tool tonight to test the quality of your device’s entropy and verify that your seed phrase is cryptographically secure. entro.tools

the wallet with the lowest perp trading fees and the best liquidity in the world. period.

on onekey swap, stablecoin swaps are permanently free. zero fees. over the past 8 months, we’ve saved users $3m and counting. and yes, this is forever. onekey doesn’t take a single cent from our clients.