# OneKey Pro custody score: 94% | TradingAgentStack

> OneKey Pro by OneKey: custody score 94% from sourced facts on supply chain, key protection, signing, customer data and incidents. Checked 2026-11-05.

Canonical: https://tradingagentstack.com/custody/onekey/

1. [Home](https://tradingagentstack.com/)

2. [Custody](https://tradingagentstack.com/custody/)

3. OneKey Pro

# OneKey Pro: custody score 94%

OneKey · Multi-asset · checked 2026-11-05. 80 of 85 points from sourced facts.

[Official store (onekey.so) →](https://onekey.so/shop/)

## Score, input by input

| Input | What we found | Points | Source |
| --- | --- | --- | --- |
| Supply chain and authenticity Genuine-device check | In the app: The OneKey app runs an anti-counterfeiting check that confirms the device is original. | 10/10 | [source](https://help.onekey.so/en/articles/11461236-anti-counterfeiting-verification-of-onekey-devices) |
| Supply chain and authenticity Official reseller list | Being re-vetted: After CryptoBilis, OneKey stopped adding resellers, is re-vetting every one, and says it will publish the full list when done. | 2/5 | [source](https://onekey.so/blog/en/updates/cryptobilis-incident-free-onekey-replacement-and-reseller-review/) |
| Supply chain and authenticity Tamper evidence | Seal or resistance: Holographic seal and packaging checks; OneKey says to judge authenticity by the in-app check, not the box. | 3/5 | [source](https://help.onekey.so/en/articles/15704666-onekey-product-packaging-instructions-and-authenticity-verification-guide) |
| Supply chain and authenticity Response to reseller incidents | Fast: Cut off CryptoBilis and offered free replacements for every device bought there since March 2026; no OneKey losses reported. | 5/5 | [source](https://onekey.so/blog/en/updates/cryptobilis-incident-free-onekey-replacement-and-reseller-review/) |
| Key protection Secure element | Certified (EAL): EAL6+ secure elements (four on the Pro). | 6/6 | [source](https://onekey.so/it/security/) |
| Key protection Open firmware | Open, reproducible: Firmware and apps on GitHub under GPL-3.0, with reproducible builds. | 9/9 | [source](https://ryder.id/blogs/post/onekey-wallet-what-four-secure-elements-do-and-what-they-dont) |
| Signing safety Own screen to check what you sign | Yes: 3.5-inch touchscreen shows what you sign. | 15/15 | [source](https://walletpilot.com/hardware-wallets/onekey-pro) |
| Customer data exposure (36 months) Customer data | None found: No customer-data breach found for the last 36 months. | 15/15 | none found |
| Incident record (24 months) Security incidents | None found: No device or vendor security incident found in the last 24 months (a 2023 physical-access flaw found by Unciphered was patched). | 15/15 | [source](https://www.theblock.co/post/210665/security-firm-unciphered-hacked-into-popular-hardware-wallet-onekey) |

## Where to buy safely

- Buy from the maker: [onekey.so](https://onekey.so/shop/).

- Resellers: After CryptoBilis, OneKey stopped adding resellers, is re-vetting every one, and says it will publish the full list when done. [source](https://onekey.so/blog/en/updates/cryptobilis-incident-free-onekey-replacement-and-reseller-review/)

- Revoked: CryptoBilis (Ledger (sales halted Oct 9, 2026), Trezor (removed Oct 9, 2026) and OneKey (authorization ended Oct 12, 2026)). [source](https://therecord.media/ledger-cryptocurrency-wallet-implant-theft)

- On arrival: check the packaging, run the genuine-device check, and reject any device that already has a PIN or recovery phrase set.

## Keep it away from your bots

A hardware wallet is the vault. Don't connect it to a trading bot, an API key or an agent wallet: give the bot a separate trading float and sweep profits back to the vault's address. [How to split vault, float and sweeps](https://tradingagentstack.com/custody/#tiers). [Set up OneKey Pro as cold storage, step by step](https://tradingagentstack.com/cold-storage/).

## Questions

### Is OneKey Pro safe?

OneKey Pro scores 94% on our custody score (80 of 85 points from sourced facts, checked 2026-11-05). Weakest point: After CryptoBilis, OneKey stopped adding resellers, is re-vetting every one, and says it will publish the full list when done.

### Has OneKey had a security incident?

No device or vendor security incident found in the last 24 months (a 2023 physical-access flaw found by Unciphered was patched).

### Where should I buy OneKey Pro?

From the maker's store (onekey.so). Resellers: After CryptoBilis, OneKey stopped adding resellers, is re-vetting every one, and says it will publish the full list when done. On arrival, run the genuine-device check and reject any device that already has a PIN or recovery phrase set.

## Other hardware wallets, scored
[BitBox02 Nova: 89%](https://tradingagentstack.com/custody/bitbox/)[Blockstream Jade Plus: 79%](https://tradingagentstack.com/custody/blockstream-jade/)[Trezor Safe 5: 78%](https://tradingagentstack.com/custody/trezor/)[CoolWallet Pro: 72%](https://tradingagentstack.com/custody/coolwallet/)[Foundation Passport Prime: 66%](https://tradingagentstack.com/custody/foundation-passport/)[Tangem Wallet: 66%](https://tradingagentstack.com/custody/tangem/)[Keystone 3 Pro: 54%](https://tradingagentstack.com/custody/keystone/)[Coldcard Q: 49%](https://tradingagentstack.com/custody/coldcard/)[Ledger Flex: 49%](https://tradingagentstack.com/custody/ledger/)

[All hardware wallets, scored](https://tradingagentstack.com/custody/) · [Is this seller authorized?](https://tradingagentstack.com/custody/#reseller-check) · [How we score](https://tradingagentstack.com/custody/#method)

## For agents

- [When to use this site, and the page index](https://tradingagentstack.com/llms.txt)
- [Sitemap](https://tradingagentstack.com/sitemap.xml)
- [Contact](https://tradingagentstack.com/contact/)
- [MCP server](https://tradingagentstack.com/mcp/)
- [MCP discovery](https://tradingagentstack.com/.well-known/mcp)