Seeing that Ledger has been compromised... Let me emphasize this again. On-chain detective @zachxbt says hardware wallets are all garbage / a tax on stupidity, and there's a reason for that. My strategy is just two things, very simple. Split into two scenarios. 1. You frequently do on-chain interactions + you don't have that much money. Use a dedicated computer, or your own everyday work computer, with VMware or Windows' built-in HyperV Manager installed. Then install a clean official OS downloaded from the official source (Windows, Ubuntu, etc.). Inside it, enable the firewall to block all applications except the browser from connecting to the internet. Then don't install any other software. Just one Chrome + OKX wallet extension. Do your on-chain contract interactions here normally. Even if your external host machine gets infected with a virus or trojan, it won't affect your virtual machine (theoretically possible, but in practice it won't). Why do it this way? Because if you frequently do on-chain interactions, you won't have the energy to go through every single transaction on your OneKey wallet, reading contract parsing and seeing what exactly it does. (Only exchanges' dedicated risk control teams need to do that kind of thing.) And then press the hardware button. 2. You don't interact often, just hodling. (BTC and the like) Use an old iPhone, reset the system, then install the open-source software airGap Vault — this is a wallet. Then turn off Bluetooth/network. Auto-generate the keys, or roll dice yourself to generate them. After that, all authorizations etc. are done by scanning QR codes. This phone should never connect to the internet again, and don't install any apps on it. No need to upgrade the iOS system either. ----------------------------------------------------- Why do it this way? If you randomly buy an iPhone X for 400 yuan on Xianyu, it's almost impossible for there to be a supply chain attack in it (the second-hand iPhone market is too large). Then generate the wallet keys offline by rolling dice, and the phone isn't connected to the internet, only scanning QR codes. This physically determines that your wallet simply cannot be stolen.. (unless you lose your phone). If the battery dies, just plug in a USB charging cable and use it. The expensive hardware wallet Pro you bought, with its touchscreen, encrypted hardware xxx and other fancy features — Apple has already implanted all of that in every iPhone. So there's no need to spend extra money.