加密硬件制造商OneKey已撤销CryptoBilis为其产品的授权分销商资格，此前有调查发现，通过这家马来西亚零售商出售的一些Ledger钱包中的资金被盗，相关事件的影响因此进一步扩大。
Crypto hardware maker OneKey has revoked CryptoBilis’s authorization as a reseller of its products, widening the fallout from the discovery that some Ledger wallets sold through the Malaysian retailer had funds stolen.
总部位于香港的OneKey在其网站上的一份声明中表示：“我们没有收到OneKey用户在此次事件中资产受损的报告，但我们正以风险真实存在的态度采取行动。CryptoBilis不再是OneKey的授权分销商。”总部位于巴黎的Ledger SAS表示，正在调查用户通过CryptoBilis购买其硬件钱包后资金被盗的报告。链上研究机构YFarmX估计，被盗金额高达1.03亿美元。Ledger尚未确认被盗金额，但表示已证实受影响的一台用户设备包含未经授权的硬件植入物。
“We have no reports of OneKey users losing assets in this incident, but we are acting as if the risk is real,” Hong Kong-based OneKey said in a statement on its website. “CryptoBilis is no longer an authorized OneKey reseller.”Paris-based Ledger SAS said it is investigating reports that users lost funds after buying its hardware wallets through CryptoBilis. Onchain research group YFarmX estimates that as much as $103 million was stolen. Ledger has not confirmed the amount lost, but said it verified that one affected user’s device contained an unauthorized hardware implant.
这起事件是近几个月来困扰加密行业的系列攻击事件中的最新一起，其中包括加拿大Coinkite公司生产的Coldcard品牌钱包中价值超过1亿美元的比特币被盗。硬件钱包通常用于冷存储，由于它们使用物理设备离线存储私钥，因此被认为是持有加密货币较为安全的方法之一。
The incident is the latest in a series of attacks to plague the crypto industry in recent months, including the theft of more than $100 million in Bitcoin from Coldcard-branded wallets made by Canada-based Coinkite Inc. Hardware wallets, commonly used for cold storage, are considered among the more secure methods of holding cryptocurrency because they use physical devices to store private keys offline.
CryptoBilis于10月10日表示，已在其位于马来西亚、菲律宾和印尼的实体店和在线渠道暂停了所有硬件钱包的销售和发货。
CryptoBilis said on Oct. 10 it had paused the sale and shipment of all hardware wallets across its stores and online channels in Malaysia, the Philippines and Indonesia.
该公司在发布的内容中表示：“我们采取这一举措是出于预防考虑，旨在Ledger的调查仍在继续以及我们在独立专家的协助下审查自身流程期间保护我们的客户。”在相关报道出现后，CryptoBilis联合创始人阿拉温德·普拉布（Arravind Prabu）在领英上发帖称，该分销商于今年早些时候被收购，管理职责已于3月移交。CryptoBilis未立即回复通过电子邮件发送的置评请求。
“We are doing this as a precaution, to protect our customers while Ledger’s investigation continues and while we review our own processes with the help of independent specialists,” it said in a post on Following the reports, CryptoBilis co-founder Arravind Prabu posted on LinkedIn that the reseller was acquired earlier this year and that management responsibilities were handed over in March. CryptoBilis didn’t immediately respond to an emailed request for comment.
Ledger表示，受影响设备的数量有限，该公司正与相关部门合作。
Ledger said the number of impacted devices is limited and it is working with relevant authorities.
该公司在X平台上的一篇帖子中表示：“我们知道这令人担忧，特别是对于那些直接受到影响的人，我们正在联系受影响的用户。”该公司补充说，所有与该事件相关的已确认病例均涉及通过CryptoBilis销售的设备。
“We know this is concerning, especially for those directly affected, and we are reaching out to impacted users,” it said in a post on X. All confirmed cases related to the incident involve devices sold through CryptoBilis, it added.
OneKey表示，3月1日至10月12日期间从CryptoBilis购买的设备可以免费更换。该公司还表示，已暂停招募新的分销商，并将对现有分销商进行审查。
OneKey said devices bought from CryptoBilis between March 1 and Oct. 12 can be replaced for free. It has also stopped onboarding new resellers and will review existing ones, it said.
OneKey是硬件钱包制造商Ledger和Trezor的竞争对手，其背后的支持者包括Coinbase Ventures以及币安控股联合创始人赵长鹏和何一的家族办公室YZi Labs。
OneKey, a rival to hardware-wallet makers Ledger and Trezor, is backed by Coinbase Ventures and YZi Labs, the family office of Binance Holdings co-founders Changpeng Zhao and Yi He.