According to CoinMeta, onekey founder yishi stated that regarding the incident where ledger devices sold through cryptobilis channels were suspected to have been tampered with, resulting in the theft of approximately $90 million in assets, onekey had not received any reports of damage as of October 10th, and they conducted an in-depth analysis of the attack path for hardware supply chain implantations. yishi pointed out that although security chips can ensure the authenticity of firmware and the generation of private keys, if the mnemonic phrases are transmitted in plaintext over the motherboard's low-speed bus (such as spi / i2c), attackers could bypass the security chip by privately disassembling the device and installing a cellular network module (such as nrf9151) to eavesdrop on screen data and remotely transmit the mnemonic phrases, thus completing the theft. In response, onekey announced five improvement measures, including upgrading anti-counterfeiting packaging, introducing an initialization process without screen display, and advancing encryption of internal motherboard bus communications at both the firmware and hardware levels. Hardware wallet manufacturer trezor also responded, stating that they have completely suspended the sale of devices through the affected e-commerce platform (cryptobilis) and are actively investigating and handling the situation.