OneKey has dropped CryptoBilis as an authorised reseller and offered free wallet replacements.
The move follows reports of cryptocurrency theft involving Ledger hardware wallets sold by the Malaysian retailer.
In a statement, OneKey said it had received no reports of its users losing assets in connection with the incident but was taking precautionary measures.
The company has stopped onboarding new resellers and is reviewing its existing distribution network.
Resellers whose business entities cannot be verified or whose ultimate beneficial ownership is unclear will lose their authorisation.
OneKey expects its reseller network to shrink and will publish a complete list of authorised sellers once the review is finished.
The measures follow an investigation by blockchain analytics firm Bitquery, which estimated cryptocurrency losses of US$102 million linked to the incident involving Ledger and CryptoBilis.
Ledger confirmed finding an unauthorised hardware implant in an affected device, although the cause and full extent of the incident remain under investigation.
CryptoBilis also sold wallets from other brands, including OneKey, Trezor, Tangem, SafePal and imKey.
Free Replacements for CryptoBilis Customers
OneKey will replace devices purchased from CryptoBilis between 1 March 2026 and the date of its statement, regardless of whether they have been activated or used.
The March starting date follows a former CryptoBilis co-founder’s claim that the retailer was acquired earlier this year, with management handed over in March.
Customers will receive the same model or a newer one if the original is unavailable, at no cost and without returning their existing device.
To apply, customers must submit proof of purchase, their device model and activation status through OneKey’s website by 31 December 2026.
OneKey Advises Customers to Move Their Assets
OneKey has advised customers not to activate unused devices purchased from CryptoBilis.
Those already using their devices should transfer their cryptocurrency to a wallet with a newly generated recovery phrase rather than wait for a replacement.
When the new device arrives, customers should generate another recovery phrase instead of importing an existing one.
OneKey also warned that its support staff will never request recovery phrases or PINs.
Featured image: Edited by Fintech News Malaysia, based on image by OneKey
