Skip to main content
727 Finance
English

OneKey founder: Hardware wallet security does not rely solely on secure chips; it also requires protecting the "last centimeter"

PANews October 10 news: OneKey founder Yishi posted that the recent asset loss incident involving Ledger users has drawn community attention to the security of hardware wallets. He believes the risk may not come from the secure chip itself, but rather exists between the protected chip and the display screen trusted by users, the so-called "last centimeter" link—where sensitive data may be exposed during transmission.

Yishi added that, as of October 10, OneKey has not received reports of user fund losses caused by this incident. In response to supply chain attack risks, OneKey plans to make improvements in multiple areas, including packaging, the mnemonic phrase display path, motherboard communication, dealer authorization, and user verification information. Among these, OneKey will launch a backup process that does not require displaying the mnemonic phrase on the device screen, and will prioritize strengthening encryption of sensitive internal communication links on the motherboard to reduce the risk of hardware implantation attacks obtaining recovery phrases. Hardware wallet security needs to cover the entire process of production, transportation, storage, and distribution, and users are advised to purchase devices through official channels and complete packaging checks and official verification.

Related news

  1. Musk: The operating cost of Grok Bot is unsustainably high relative to its revenue.

    PANews, November 2 news: In response to a user's question on the X platform about the rapid depletion of Grok Bot usage quotas, Musk stated that the operating c...

  2. China Merchants Bank and several other institutions have launched wallet transaction statement printing services within the digital renminbi App.

  3. The founder of POAP may have subscribed to 100,000 ETH during the 2015 ICO.

  4. UBTECH releases Thinker-Sim embodied intelligence simulation platform.

  5. The application period for virtual asset service provider licenses in Brazil has ended, with only about 40 companies submitting applications.