OneKey terminated its reseller agreement with the Southeast Asian distributor CryptoBilis on October 12, 2026. This decision follows reports that tampered Ledger devices sold by the same reseller were linked to significant thefts, with preliminary on-chain analysis estimating losses between $86 million and $93.2 million.
Although OneKey reports no confirmed loss of funds among its own users, it has initiated a replacement program for all OneKey wallets purchased from CryptoBilis between March 1 and October 12, 2026. This offer applies to both new and used devices, with applications accepted until December 31, 2026.
The manufacturer is also pausing the onboarding of new resellers to conduct a comprehensive audit of its existing distribution partners. Ledger has confirmed that unauthorized hardware modifications were discovered in units sold via CryptoBilis, though it noted that its direct sales channels remain unaffected.
Founder Yishi advises users of potentially compromised devices to treat their recovery phrases as exposed and to transfer assets to a new wallet immediately. The replacement program provides new hardware but does not cover lost funds, making the migration of assets the primary security priority for affected owners.
