OneKey Drops CryptoBilis and Hands Out Free Wallet Replacements After Implant Scare
OneKey has cut off CryptoBilis, the reseller at the centre of a tampered-hardware-wallet scare, and will hand out free replacement devices to anyone who bought an OneKey unit from it.
Who qualifies and how to claim
The offer covers OneKey hardware bought from CryptoBilis between March 1 and Oct. 12, 2026, any model, whether it was activated or left sealed. Applications close on Dec. 31, 2026. Claims go through a support ticket titled "CryptoBilis Replacement", with a receipt or other proof of purchase, plus the device model and whether it has been used.
Replacements ship straight from the official OneKey store, and the old device does not need to be returned. If your model is out of stock, OneKey says it will send a free upgrade instead.
The advice matters more than the freebie
OneKey says it has received no reports of its own users losing funds, but CEO Yishi refuses to read that as safety: "But no reports doesn't mean no risk." Buyers are told not to activate unused devices.
Anyone already holding assets should treat the old recovery phrase as compromised and move funds to a wallet with a freshly generated seed, without waiting for the replacement to arrive. A recovery phrase recreates a wallet's private keys, so importing the old one into new hardware would carry the same keys over.
The wider cleanup
OneKey has stopped approving new resellers and is rechecking every existing one. Dealers whose business entity or ultimate beneficial owner cannot be verified will lose their authorization, and a full list of approved resellers is promised once the review ends.
The trigger sits with Ledger's investigation. On Oct. 10, Ledger said one affected user's device contained an "unauthorized hardware implant", and every confirmed case traces to CryptoBilis, a Southeast Asian reseller that has stopped selling hardware wallets. A separate buyer has reported a second tampered device bought from MediaMarkt, naming distributor Aqipa, and that unit is now with Ledger for analysis.
Why this matters
Hardware wallets sell on one promise: your key never leaves the device. A tampered unit breaks that before you ever generate a phrase, which is why buying through a verified seller is not a small detail. If there is any doubt about your device, generate a new seed on clean hardware. A free replacement is useless if you import the compromised phrase onto it.