OneKey Founder Says It Will Strengthen “Last Centimeter” Security Protections in Response to Concerns About the Ledger-Related Incident
BIBIBI
AT A GLANCE
Yishi said that hardware wallet risks may arise between the secure chip and the display, and that OneKey plans to improve multiple security processes.
Article
OneKey Founder: Hardware Wallet Security Depends on More Than Secure Chips; the “Last Centimeter” Also Needs Protection
PANews October 10 reported that OneKey founder Yishi said a recent asset loss incident involving Ledger users has drawn community attention to hardware wallet security. He believes the risk may not come from the secure chip itself, but may exist between the protected chip and the display trusted by users—the so-called “last centimeter,” where sensitive data may be exposed during transmission. Yishi added that, as of October 10, OneKey had not received reports of users losing funds as a result of the incident. To address supply chain attack risks, OneKey plans to improve multiple areas, including packaging, the seed phrase display path, motherboard communications, distributor authorization, and user verification information. In particular, OneKey will introduce a backup process that does not require displaying the seed phrase on the device screen, and will prioritize strengthening encryption for sensitive communication links within the motherboard to reduce the risk of recovery...
PANews, dated October 10 reported on a post by OneKey founder Yishi.
02
Yishi said that a recent asset loss incident involving Ledger users has drawn community attention to hardware wallet security.
03
Yishi believes the risk may not come from the secure chip itself, but may exist between the protected chip and the display trusted by users.
04
The original text calls the link between the protected chip and the display the “last centimeter,” and says that sensitive data may be exposed during transmission.
05
Yishi said that, as of October 10, OneKey had not received reports of users losing funds as a result of the incident.
06
OneKey plans to improve areas including packaging, the seed phrase display path, motherboard communications, distributor authorization, and user verification information.
07
OneKey will introduce a backup process that does not require displaying the seed phrase on the device screen, and plans to prioritize strengthening encryption for sensitive communication links within the motherboard.
AI-assisted interpretation
The following is analysis, separate from reported facts. Verify important claims independently.
Even when a hardware wallet uses a secure chip, risks may remain when sensitive information is transmitted between components such as the chip and the screen. Yishi calls this very short transmission link the “last centimeter.” OneKey said it will adjust its backup process and strengthen internal communication protections, but the original text does not establish the specific cause of the asset losses involving Ledger users.
Why it matters to readers
If sensitive data may be exposed during transmission inside the device or somewhere in the supply chain, focusing only on the secure chip itself may be insufficient. Users should also pay attention to the device’s source, verification information, the way the seed phrase is displayed, and the manufacturer’s subsequent security improvements.
New users should safeguard their seed phrase and pay attention to the purchase channel and verification process for hardware wallets. This article presents a risk assessment and improvement plan; it does not mean that the relevant attack method has been confirmed.
Risks and unknowns
The cause, scale of losses, and scope of impact of the asset loss incident involving Ledger users were not stated in the original text.
The claim that the risk lies in the “last centimeter” is Yishi’s assessment; the original text provides no investigation conclusion or technical evidence.
The original text does not confirm whether a supply chain attack or hardware implantation actually occurred.
Related Developments
Loading event timeline…
The specific release date, implementation details, and audit status of the OneKey improvement plan are unknown.
The original text is truncated at the end, so the complete statement concerning reducing the risk of hardware implant attacks cannot be confirmed.
Related concepts
Hardware wallet
A wallet that uses a dedicated physical device to protect private keys and sign transactions.
