On October 15, OneKey founder Yishi announced that following the exposure of the Ledger implant incident, many users are concerned about whether their hardware wallets have been tampered with. In response, OneKey has developed and funded the launch of a hardware wallet authentication website called 'OneStone Authentication', aimed at helping users identify potential abnormal implants on their device's motherboard. This tool uses standardized prompts, judgment rules, and result wording for Ledger, OneKey, and Trezor, without giving special treatment to OneKey's own devices. In terms of the detection process, users can open their devices, take photos of the motherboard, and upload them. The photos will first be resized by the browser to no more than 2048 pixels and re-encoded to remove metadata such as GPS location. They will then be transmitted via Cloudflare to Anthropic's Claude visual model for analysis. The model will check whether the motherboard matches the device model, identify the main chip model and visible text, and mark any additional chips, modules, antennas, and wires as anomalies. The final results are determined by fixed rules rather than directly by the model: if the main chip is identifiable, the model matches, and no additional components are found, the result is 'No Worries'; if there is a mismatch in chip model or anomalies are found, the result is 'High Alert'; if the photos are insufficient to support a judgment, users will be prompted to retake them. Yishi emphasized that the tool does not recommend users switch wallet brands and does not display advertisements, although the store links in the OneKey guide contain referral codes that will be clearly marked. The tool's detection results are for reference only and cannot serve as proof of device safety: it cannot check firmware, software, internal chips, or components beneath shields, screens, or batteries, nor can it distinguish counterfeit chips with identical silk screens. Additionally, the visual model may still miss detections or produce false positives, so users should consider it as one of several security checks rather than a security certification. Official inspections and contacting device manufacturers' customer service remain necessary steps.
All Comments