OneKey Drops Malaysian Reseller CryptoBilis After Wallet Tampering Probe
OneKey severs ties with CryptoBilis over wallet security concerns
Crypto hardware maker OneKey has cut ties with Malaysian retailer CryptoBilis and launched a full review of its own internal processes, widening the fallout from a spyware attack that compromised crypto wallets sold through unauthorized resellers.
The Hong Kong-based company confirmed in a statement on its website that CryptoBilis is "no longer an authorized OneKey reseller." The move follows revelations that Ledger wallets sold by the same retailer had been tampered with.
Key numbers
- OneKey reported zero asset losses among its own users from this incident
- The company began a full internal process review immediately
- CryptoBilis was simultaneously selling both Ledger and OneKey products
What OneKey is doing about it
OneKey stated: "We have no reports of OneKey users losing assets in this incident, but we are acting as if the risk is real." The company is taking precautionary measures despite no confirmed breaches affecting its own devices.
Why this matters
The incident highlights how crypto hardware wallets — physical devices that store private keys offline — can be compromised when sold through unauthorized resellers. A hardware wallet is a portable device that keeps cryptocurrency private keys secure by storing them offline, away from internet-connected computers and phones.
When tampered devices are sold through third-party resellers rather than directly from manufacturers, the supply chain becomes a vulnerable point that attackers can exploit.
What happens next
OneKey is conducting a full review of its internal processes. The company has not announced a specific timeline for completing the review or any further reseller changes.