OneKey is replacing hardware wallets bought through CryptoBilis even though it says no OneKey user has reported asset loss connected to the ongoing reseller incident. The company's October 12 response is preventive: it has removed CryptoBilis as an authorized reseller, frozen new reseller recruitment and begun re-checking its existing distribution network.
The move follows Ledger's discovery of unauthorized hardware inside an affected device sold through the same channel. It does not establish that a OneKey wallet was physically compromised, that OneKey firmware was breached or that all brands sold by CryptoBilis were altered. Those claims require separate evidence.
Who qualifies for the free device
OneKey's replacement policy covers any OneKey hardware-wallet model purchased from CryptoBilis between March 1, 2026 and October 12, 2026, the date of its announcement. A device qualifies whether it was used, activated or kept sealed.
OneKey chose March 1 because an ex-cofounder had publicly described a change in CryptoBilis ownership and management around that period. This is the company's stated reason for selecting a precautionary coverage window, not an independently proven start date for physical tampering.
Applications must arrive by December 31, 2026. Customers must supply proof of purchase, the device model and whether it has been activated or used. OneKey instructs buyers to initiate the request through the support button on its official website. A merchant-to-customer DM is not the announced channel.
A qualifying customer does not need to send the old device back. OneKey says it will ship a new device of the same model from its official store, upgrading to a newer model at no cost if the original is out of stock. The replacement program is free, but it is not a promise to refund a historical asset loss.
A replacement wallet does not repair an exposed seed
The company's guidance distinguishes unopened from already used devices. If a suspect device has never been initialized, OneKey says not to initialize it; arrange replacement instead.
If a customer already holds crypto using the device, OneKey advises moving assets promptly to a wallet with a completely new recovery phrase. The user should not wait for the replacement unit. A trusted second hardware wallet can generate the new phrase; OneKey also describes a freshly generated temporary software wallet on a trusted phone/computer as a fallback while waiting for hardware. That temporary route has its own software/device-security trade-offs.
When the replacement arrives, OneKey recommends generating yet another fresh recovery phrase on the new hardware and transferring funds to it. Importing the old seed into the new physical device would preserve the same potentially compromised keys. Importing a temporary software-wallet seed defeats the goal of creating hardware-held secrets isolated from the temporary environment.
For any transfer, users still must check the recipient address, blockchain network, token compatibility and gas before moving funds. That operational caution is independent of the reseller's misconduct investigation.
Why OneKey withdrew reseller authorization without a reported OneKey theft
Hardware-wallet safety has two layers: cryptographic product design and physical distribution integrity. A manufacturer can have secure firmware yet lose assurance about what a third party shipped to buyers. OneKey's statement treats uncertain provenance as enough to justify replacement without making a claim about confirmed OneKey exploitation.
It has also stopped admitting new resellers and plans to reverify all current partners. If an entity's business identity or ultimate beneficial owner cannot be established, the company says authorization will be withdrawn. An updated authorized-dealer list will be published after review. The scale of that future reduction has not yet been confirmed.
The decision has a direct consumer-protection cost but also limits the temptation to infer wrongdoing across other vendors. CryptoBilis distributed other brands, including Trezor and Tangem; selling through the same shop does not establish a common compromise.
The customer deadline and the security deadline are not the same
December 31 is a replacement-application deadline. OneKey's security advice to owners of used devices is immediate migration of funds to a fresh seed. This distinction matters because a free device shipped weeks later cannot reverse an unauthorized transaction that occurs before the customer's keys are changed.
The genuine support process never needs a user's seed phrase or PIN. OneKey expressly warns it will never ask for either. Phishing pages impersonating an “eligibility verification” form are particularly dangerous because buyers are now expecting a manufacturer-initiated outreach process.
Evidence status and risk
Confirmed — OneKey statement dated October 12: termination of CryptoBilis authorization, all-reseller review, March 1–October 12 purchase window, December 31 application deadline, required proof of purchase/model/activation details, no-return replacement policy and its customer security advice.
Confirmed as the company's present disclosure: OneKey says it has received no reports of related OneKey-user asset losses. That is narrower than a claim that an independent forensic audit found zero tampering.
Unresolved: number of OneKey devices sold through CryptoBilis, whether any were altered, completion time of dealer re-screening and actual replacements shipped.
WikiBit rates the situation High as a reseller-provenance and customer-key precaution, not a confirmed OneKey theft. The broader underlying Ledger case, including the corrected on-chain loss estimate, continues at Ledger–CryptoBilis investigation.
