OneKey has cut ties with CryptoBilis, a Southeast Asian reseller, and is offering free replacement devices to anyone who bought a OneKey wallet through that channel. The move follows serious allegations that tampered Ledger hardware wallets sold by CryptoBilis were tied to large-scale crypto thefts.
OneKey says none of its own users have reported losing funds. The company is still treating every device that passed through the reseller as suspect.
What OneKey is offering
OneKey terminated CryptoBilis’s authorization as a reseller on October 12, 2026. Alongside the split, it opened a replacement program for affected buyers.
Any OneKey model purchased from CryptoBilis between March 1 and October 12, 2026, qualifies. That includes used devices, not just units bought new in the box.
Buyers have until December 31, 2026, to apply. Replacements ship straight from OneKey’s official store.
Advertisement
Notably, customers do not have to send their original devices back.
OneKey is also hitting pause on new partnerships. The company says it is postponing the onboarding of new resellers while it audits the ones it already works with.
The Ledger problem behind the cutoff
CryptoBilis sold a range of hardware wallets in Southeast Asia, including Ledger, OneKey, Trezor and others.
Ledger confirmed that unauthorized implants were found in devices sold through CryptoBilis. The company also said its direct sales channels were not affected.
Preliminary on-chain analysis has suggested losses tied to the compromised devices fall somewhere between $86 million and $93.2 million, spread across numerous wallets in Southeast Asia.
Ledger, however, has cautioned that not every reported theft can be traced back to the tampering. It has not yet released a comprehensive report detailing how many users were actually affected.
What this means for buyers and wallet makers
For users, the practical takeaway is narrow but urgent. Anyone who bought a hardware wallet of any brand from CryptoBilis during the affected period has reason to check their setup, and OneKey owners specifically have a free path to a new device before the December 31 deadline.
OneKey founder Yishi is urging anyone who may have used a compromised device to treat the recovery phrase as potentially exposed, and move assets to a freshly generated wallet immediately. The OneKey offer covers hardware, not funds, which is why Yishi’s migration advice matters more than the shipping label.
OneKey’s decision to freeze new reseller onboarding and audit existing partners signals that at least one manufacturer sees distribution as a security surface, not just a sales channel.
Disclosure: This article was edited by John Chen. For more information on how we create and review content, see our Editorial Policy.