Trading Education Platform SystemSubscribe for FreeSupport
Wallets / OneKey Pro
HARDWARE WALLET REALITY CHECK · READ 11 OCT 2026

OneKey Pro: what the sources say

Current 1 disclosed weakness 0 company incidents

Key facts

The questions, with sources

QuestionWhat the sources saySource
Status
Current — Official store page lists OneKey Pro with a buy/add-to-cart button on 2026-10-11 (USD 278). OneKey announced a sibling model, OneKey Pro 2 (USD 299), on 2026-10-08, called its 'next-generation flagship'; the sources read do not say Pro is replaced or discontinued. Pro 2 is QR-only (no Bluetooth/USB data/NFC per launch post), so it is a different design.
Company
ONEKEY LIMITED, Hong Kong
List price
$278 — Official store list price shown in USD (also on the Italian-language store page; no EUR price shown). OneKey Care replacement add-on USD 69.99 is separate.
Secure element
Yes: 4 secure elements; vendor/model not named on maker page. DeepWiki's summary of the firmware-pro repo mentions a THD89 secure element (third-party summary, not confirmed by maker).; EAL 6+ (maker claim; Common Criteria); no certificate ID found
Firmware code
Partial; reproducible build: not verified. Maker says firmware and apps are fully open source and reproducible on GitHub. Repository is described as built on the Trezor codebase; license text not confirmed. Maker's own verification guide compares a checksum of the MCU part of the release binary and does not cover SE firmware. Maker's audit page says SE firmware source and docs are not public.
Companion app
Yes. Maker says desktop and mobile apps are on GitHub (OneKeyHQ/app-monorepo); license and completeness not independently checked.
Connections
USB: yes. Bluetooth: yes. NFC: yes. QR: yes. microSD: n/v.
Screen
Colour touchscreen, about 3.5 inch; touch: True
Assets
30,000+ coins and tokens across 100+ chains (maker)
Multisig and PSBT
Yes. Maker lists multisig with Ethereum Safe, Solana Squads and Bitcoin Sparrow Wallet.
Passphrase
Yes. Optional passphrase, hidden wallets; firmware 4.15+ can bind hidden wallets to a PIN. Lost passphrase cannot be recovered.
Shamir backup (SLIP-39)
Not verified. Not mentioned in pages read.
—
Recovery phrase standard
BIP39 (word-count options 12/18/24 per maker help page; standard not named there)
Optional recovery service
Not verified. No recovery service found in pages read. Self-service backup card (OneKey Lite) exists; OneKey Care is a replacement-coverage add-on.
FIDO / passkeys
Yes. Maker says Pro works as a passkey security key; Pro 2 comparison adds TOTP/other items.
Bug bounty
Not verified
Warranty
OneKey Care (USD 69.99 add-on) covers replacement, not repair; base warranty terms not found.
—

"n/v" or "not verified" means we could not confirm it from a source we could read. Maker claims are marked as such. Confirm on the maker's site before you buy. Education only, not investment advice.

Summary

Five facts

  • Official store lists OneKey Pro at USD 278 on 2026-10-11, alongside OneKey Pro 2 at USD 299 launched 2026-10-08 [source 1].
  • Maker states Pro has four EAL 6+ secure elements, USB-C, Bluetooth, NFC and QR connectivity [source 2].
  • Maker says firmware and apps are open source on GitHub, but its audit page says secure element firmware source is not public [source 3].
  • Maker lists multisig, optional passphrase and passkey support [source 2].
  • In 2023-02 Unciphered showed key extraction on an older OneKey wallet (Mini); OneKey said it was patched and no one was affected [source 4].
Independent checks

Audits

  • date n/v Not named on maker page (SlowMist inferred from report filename for Bluetooth firmware). Scope: Pro main control firmware v4.10.0 audited, fixed in v4.11.0; Pro Bluetooth firmware v2.3.2; SE firmware stated as audited but no report source
Device record

Publicly disclosed weaknesses

  • 2023-02 Unciphered demonstrated key extraction from OneKey's hardware wallet (reported as the OneKey Mini) by intercepting unencrypted communication between CPU and secure element with an FPGA. OneKey said it patched it, said no one was affected, and said it paid a bounty. Not reported as affecting OneKey Pro. Funds lost: no. Fixed source

Disclosed weaknesses are listed whatever their severity. "Funds lost" is what the sources say. "Fixed" means the source states a fix exists, which only helps if you update.

Company record

Incidents at the maker or its service providers

  • No company incident found in our search.

These affect the company or its customers and apply to every device of the brand. They are not weaknesses of this device.

Questions

Questions about OneKey Pro

Is OneKey Pro safe?

We do not give a yes or no, because safety depends on what you need to protect and on facts that change. We found 1 publicly disclosed weakness and 0 company incidents in our search. Read the sources above before you buy.

Does OneKey Pro need an internet connection?

Signing happens on the device. How the device talks to your phone or computer depends on its connections: USB, Bluetooth, NFC, QR. The companion app or software that builds the transaction is online.

Who found the weaknesses listed for OneKey Pro?

The page names who disclosed each one when the source does. Several were found by a competing maker's research team or by independent security firms. We cite the affected company's own statement where we found one, and label press-only reports.

Sources

Where this comes from

Not verified: Not verified: secure element vendor/model and certificate ID; firmware license and true reproducible-build status; audit dates and report PDFs (links on the help page were placeholders); SLIP39; microSD; panel type (sources conflict); EUR price; formal bug bounty program (only a bounty payment reported in 2023); whether Pro is being phased out after Pro 2. Researched but not read: HITB 2023 'KeyBleed' talk on OneKey Mini and a Ledger dispute over a OneKey claim, so not included. No company incident (data breach/supply chain) found in the searches run; absence is not proof.

See how we check. To report an error, use corrections and right of reply.