OneKey founder: Hardware wallet security does not rely solely on secure chips; it also requires protecting the "last centimeter"

PANews October 10 news: OneKey founder Yishi posted that the recent asset loss incident involving Ledger users has drawn community attention to the security of hardware wallets. He believes the risk may not come from the secure chip itself, but rather exists between the protected chip and the display screen trusted by users, the so-called "last centimeter" link—where sensitive data may be exposed during transmission.

Yishi added that, as of October 10, OneKey has not received reports of user fund losses caused by this incident. In response to supply chain attack risks, OneKey plans to make improvements in multiple areas, including packaging, the mnemonic phrase display path, motherboard communication, dealer authorization, and user verification information. Among these, OneKey will launch a backup process that does not require displaying the mnemonic phrase on the device screen, and will prioritize strengthening encryption of sensitive internal communication links on the motherboard to reduce the risk of hardware implantation attacks obtaining recovery phrases. Hardware wallet security needs to cover the entire process of production, transportation, storage, and distribution, and users are advised to purchase devices through official channels and complete packaging checks and official verification.