Security Incident · Wallet
OneKey "Man-in-the-middle" attack
Cybersecurity startup Unciphered has carried out an attack on encrypted hardware wallets made by OneKey.
- Attack category
- "Man-in-the-middle" attack
Incident Overview
In a video on YouTube, Unciphered demonstrates a so-called "man-in-the-middle" wallet attack method that exploits a vulnerability to extract a mnemonic seed phrase, or private key, from a OneKey Mini hardware wallet. OneKey acknowledged the vulnerability in a statement and said that no one was affected as it had updated the security patch. OneKey said it has paid a bounty to Unciphered.
Sources & References
This record presents information attributed to the linked sources. Incident dates describe the original event, not a new report. Reported loss figures reflect the source record and are not current market valuations.