OneKey Anzen
@OneKey_Anzen

The Security Lab at OneKey.

 /dev/null
onekey.so/anzen/
Joined October 2022
3 Photos and videos
Article

Statement on Phishing Emails Impersonating OneKey

On September 10, 2026, a batch of emails titled “Security Advisory: Critical Entropy Generation Vulnerability” was sent under the name masa@onekey.so. The emails falsely claimed that OneKey hardware
1
2
866
Article

The COLDCARD Entropy Failure: How a Silent RNG Fallback Cost Users $38 Million

In cryptography, "random" is a hard metric. It is something you can quantify, and something that has to hold up under real computing power. A 12-word recovery phrase is backed by a 128-bit random
3
16
5,152
Article

The Hidden Threat: Why Supply Chain Attacks Are the Real Danger to Hardware Wallets

When we talk about hardware wallet security, the conversation usually jumps straight to zero-day exploits, malware, or remote hacking. It makes sense—we buy these devices specifically to keep our

1
1
11
13,571
Article

Can We Trust What We See on Screen If the Signing Cannot Be Verified?

In an instant, 1.5 billion dollars vanished. On February 21, 2025, Bybit suffered the largest single theft in crypto history. Attackers infiltrated the internal signing environment and took control
2
4
2,354
Article

Ledger's Three Data Breaches Expose 270,000+ Users' Home Addresses

At 11 PM, Michael, a Ledger user in San Francisco, received an email. It contained his full name, home address, and even the exact order number from his 2023 Ledger Nano X purchase. The sender claimed

1
3
11
23,482
Article

Ledger Recover: A Recovery Scheme That No Longer Fits the Definition of Self Custody

Self custody has a clear and specific meaning. Private keys are generated, stored, and used only on devices controlled by the user. No third party can participate in the recovery or disposition of
2
6,903
Article

Four Dollars Took Away Four Years of Wealth

In recent weeks, multiple media outlets have reported a series of violent home-invasion robberies targeting crypto holders. Criminals have recently been disguising themselves as couriers, delivery
4
19,207
Article

How did 9 million dollars disappear? A Complete Breakdown of the Yearn Exploit

As markets cooled, many protocols slipped into a low-activity mode. Updates slowed, audits fell behind, and long-running code began to reveal risks that had been buried for years. These weak points
1
4
8,731
Article

The Second Major Incident This Year: Understanding NPM Supply Chain Attacks

Since September 8, NPM has not had a truly quiet moment. The first incident happened in early September. A well-known maintainer, qix, had his account stolen through a phishing email. The attacker
3
4
14,463
Article

Can Quantum Computing Break BTC? A Clear Guide to Post-Quantum Security

The debate around “whether quantum computers can eventually crack Bitcoin” has been heating up again. Today’s cryptographic mechanisms are still extremely secure for classical computers — even for

17
6
16
58,478
Article

What the Geekcon 2025 Live Exploits of Cypherock X1 and Jade Really Reveal

Introduction Since 2024, wallet private key issues have occurred frequently, resulting in cumulative losses exceeding $855 million[2]. The most recent private key issue that caused large-scale impact

15
8
24
47,297
Load more