Langkau ke kandungan utama
727 Finance
Bahasa Melayu

OneKey founder: Hardware wallet security does not rely solely on secure chips; it also requires protecting the "last centimeter"

PANews October 10 news: OneKey founder Yishi posted that the recent asset loss incident involving Ledger users has drawn community attention to the security of hardware wallets. He believes the risk may not come from the secure chip itself, but rather exists between the protected chip and the display screen trusted by users, the so-called "last centimeter" link—where sensitive data may be exposed during transmission.

Yishi added that, as of October 10, OneKey has not received reports of user fund losses caused by this incident. In response to supply chain attack risks, OneKey plans to make improvements in multiple areas, including packaging, the mnemonic phrase display path, motherboard communication, dealer authorization, and user verification information. Among these, OneKey will launch a backup process that does not require displaying the mnemonic phrase on the device screen, and will prioritize strengthening encryption of sensitive internal communication links on the motherboard to reduce the risk of hardware implantation attacks obtaining recovery phrases. Hardware wallet security needs to cover the entire process of production, transportation, storage, and distribution, and users are advised to purchase devices through official channels and complete packaging checks and official verification.

Berita berkaitan

  1. Musk: Kos operasi Grok Bot tidak mampan tinggi berbanding hasilnya.

    PANews, 2 November: Sebagai respons kepada pertanyaan pengguna di platform X mengenai penggunaan kuota Grok Bot yang cepat habis, Musk menyatakan bahawa kos ope...

  2. China Merchants Bank dan beberapa institusi lain telah melancarkan perkhidmatan percetakan penyata transaksi dompet dalam Aplikasi renminbi digital.

  3. Pengasas POAP mungkin telah melanggan 100,000 ETH semasa ICO 2015.

  4. UBTECH melancarkan platform simulasi kecerdasan terbenam Thinker-Sim.

  5. Tempoh permohonan untuk lesen penyedia perkhidmatan aset maya di Brazil telah tamat, dengan hanya kira-kira 40 syarikat mengemukakan permohonan.