Independent DeFi security desk · Status: operationalMethodology & corrections · Submit an incident
DDeFi Safety ToolsNEWS · DATA · PRACTICAL SAFETYGet the briefing
BTC$82.9K-0.15%ETH$2.5K+1.07%DeFi TVL$92.4BMarket dataDEX 24h$5.8BMarket dataStablecoin cap$313.2BMarket dataETH gas0.41 gweiNetwork data2026-10-12 14:31 UTC
DeFi Safety · Fact checked

OneKey cuts off CryptoBilis, offers free wallet replacements

OneKey's actions highlight the critical need for stringent supply chain security in the crypto industry to prevent large-scale asset thefts.

By DeFi Tools Guide Editorial Team · Published Oct 12, 2026, 10:23 AM UTC · Updated 2026-10-12 · Risk level: medium
Sources checked: Oct 12, 2026, 2:16 PM UTC

This article may contain affiliate links. Commercial relationships are disclosed in the affiliate policy.

DeFi Safety — illustration keyed to this article's identifier. Source documents are listed under Sources and are not reproduced here.

What happened

OneKey’s actions highlight the critical need for stringent supply chain security in the crypto industry to prevent large-scale asset thefts.

Reported details

  • OneKey cuts CryptoBilis as fallout from $86M Ledger wallet exploit spreads    Cryptopolitan
  • Changpeng Zhao Warns Crypto Holders After $86 Million Ledger-Linked Theft, $142 Million Coldcard Exploit Put Wallet Security Under Scrutiny    TradingView
  • OneKey’s actions highlight the critical need for stringent supply chain security in the crypto industry to prevent large-scale asset thefts.
  • All OneKey models bought from the reseller between March 1 and Oct. 12 qualify, including used devices. Buyers must apply by Dec. 31.

Why this matters

Whether OneKey reaches the custody and settlement layer depends on what it actually names. If it points at a custodian, a redemption term or a withdrawal rule, that is the layer where exposure lives, and the name and its timing are the parts worth checking. If it names none of those, this angle simply does not apply here, and reading custody risk into it would be an assumption rather than a finding.

Evidence boundary

The scope is limited to what the linked reports state, and where two of them diverge both positions are recorded without either being picked in advance.

What to verify

If OneKey names a custodian or a redemption term, check that name and its timing against the operator’s own documentation; if it names neither, there is nothing here to verify on that layer.

Sources and editorial check time

This information is educational and is not financial, legal, or tax advice.

Sources