# OneKey Cuts CryptoBilis Ties After CryptoBilis-Sold Wallet Drains

By Simon Yoon

Canonical URL: https://www.tokenpost.com/news/technology/30432
Published: 2026-10-12T15:44:49.000Z
Updated: 2026-10-12T15:44:49.000Z
Section: Technology

> The company is offering free replacements for eligible devices purchased through CryptoBilis after reported losses reached $102.0 million across 324 wallets.

OneKey has cut ties with CryptoBilis and launched a free replacement program after cryptocurrency wallets linked to devices sold by the Southeast Asian distributor were drained.

The replacement offer covers every OneKey model purchased through CryptoBilis from March 1 through Oct. 12, 2026, including devices that have not been activated. Customers must apply by Dec. 31, 2026.

Replacements will ship from OneKey’s official store and match the original model. If that model is unavailable, OneKey will provide a free upgrade. Customers do not need to return their original devices.

OneKey has paused new reseller approvals and is reviewing its existing dealer network. The review may revoke authorization from dealers with unverifiable operating entities or unclear ultimate ownership.

The company reported no confirmed losses among its own users connected to the incident. It advised customers holding assets on affected devices to transfer them to wallets generated with completely new recovery phrases and warned against importing an old phrase into a replacement device.

“Users’ asset security can’t rely on luck,” OneKey said. The company also said its support team will never request a recovery phrase or PIN.

CryptoBilis sold devices from Ledger, OneKey, Trezor, Tangem, SafePal and imKey in Indonesia, Malaysia and the Philippines. Ledger has identified an unauthorized hardware implant in at least one affected device and has stated that its own systems were not breached. The available findings do not establish that the implant caused every reported loss.

The reported loss total remains unsettled. An initial estimate exceeded $86 million across 10 public addresses. A later analysis counted $102.0 million taken from 324 wallets, using balances through Oct. 12 and asset prices from the morning of Oct. 9, 2026. The wallets spanned TRON, Bitcoin, Ethereum, Solana, BNB Chain and Polygon.

The count of 324 wallets does not establish the number of affected people because one person may control multiple wallets. Blockchain records connect the losses to devices sold through CryptoBilis but do not establish how private keys or recovery phrases were obtained.

Tether froze $10.0 million in Tether (USDT) across 20 wallets. The analysis also identified 2.38 million USD Coin (USDC) in two wallets that Circle could freeze. Four TRON addresses received about 65.2 million USDT, while two Bitcoin addresses still held 203.79 BTC as of Oct. 11, 2026.

The move follows [TokenPost’s earlier coverage of OneKey’s reseller action](<https://www.tokenpost.com/news/technology/30275>).



## Links in this article

- [TokenPost’s earlier coverage of OneKey’s reseller action](https://www.tokenpost.com/news/technology/30275)
