Please read these Terms carefully. They contain: (a) limits on OneKey's liability to you (Section 15); (b) a binding individual arbitration agreement and class action waiver (Section 17), which you may opt out of within thirty (30) days, subject to any mandatory rights you have under Applicable Law; (c) a one-year deadline for bringing certain claims, subject to mandatory law (Section 15.8); (d) confirmation that OneKey does not hold your self-custodied Digital Assets and cannot recover, freeze or reverse blockchain transactions for you (Section 4). Only the English version of these Terms is legally binding, subject to applicable law (Section 20.8).

1.1 These Terms of Use ("Terms") are a legally binding agreement between you and ONEKEY LIMITED (壹匙有限公司), a private company limited by shares incorporated in Hong Kong, Business Registration Number 73618989, with its registered office at 0F-129, 4/F, 9 Queens Road Central, Central, Hong Kong ("OneKey", "we", "us" or "our"), except where the checkout page, Product interface or applicable Additional Terms expressly identify another contracting party for a particular sale or service.

1.2 OneKey provides hardware security products under the OneKey brand. The OneKey App is companion software for those products and for other compatible wallets. Certain OneKey Device models may also support two-factor authentication or security-key functions. These Terms govern your use of:

(together, the "Products").

1.3 Additional terms and responsible providers. Some Products are also subject to additional terms, including the shipping, returns and warranty terms published in the OneKey online store (which contain the limited warranty for OneKey Devices), the purchase terms shown when you buy a paid feature, and the rules of any promotion, referral or rewards programme ("Additional Terms"). Additional Terms form part of these Terms. If an Additional Term conflicts with these Terms, the Additional Term prevails only for the Product it covers. No Additional Term increases OneKey's liability beyond Section 15 unless it expressly says so.

1.4 Accepting these Terms. You accept these Terms when you affirmatively tap or click to agree to them before first using the OneKey App or an account-based service, or when you proceed through the acceptance step presented during setup of a OneKey Device. Merely viewing our website or possessing an unopened device does not by itself constitute acceptance. If you do not agree, do not activate or use the Products. If you bought a OneKey Device and do not agree to these Terms, you may return it unused to the extent permitted by the applicable store terms and any mandatory cancellation or return rights under Applicable Law.

1.5 These Terms replace earlier versions. Subject to Section 21, these Terms replace and supersede the "User Service Agreement", the "OneKey Terms of Service", the "OneKey App Terms of Use" (including version APP-2026-01) and every translation of any of them.

In these Terms:

3.1 To use the Products you must:

3.2 If you use the Products on behalf of a company or other organisation, you confirm that you are authorised to bind it to these Terms, and "you" includes that organisation.

3.3 Restricted Locations.

OneKey may not make all Products or services available in all markets or jurisdictions and may, in its sole discretion, restrict or prohibit access to or use of all or any part of the Products or services from certain countries, territories or regions (“Restricted Locations”).

OneKey may impose specific restrictions on users in a Restricted Location, refuse to provide or discontinue all or any part of the Products or services, or apply additional eligibility requirements, at any time and in its sole discretion. A Product or service may also be subject to additional geographic restrictions imposed by the relevant Third-Party Service provider.

The current list of Restricted Locations is set out in Annex 1 (Restricted Locations) to these Terms, which is published separately in the OneKey Help Center. OneKey may update Annex 1 from time to time in response to changes in Applicable Law, regulatory requirements, sanctions, internal risk-control policies, product availability or restrictions imposed by Third-Party Service providers. The latest published version of Annex 1 prevails. The inclusion of a country, territory or region in Annex 1 does not necessarily mean that every OneKey Product or service is unavailable there.

You are responsible for reviewing the latest list and for ensuring that your access to and use of the Products are permitted in your location. You must not use a VPN, proxy, false or misleading information or any other means to circumvent a geographic or eligibility restriction. If a Product or service is restricted or unavailable in your location, you must immediately stop accessing or using the relevant Product or service.

3.4 We may ask you for information where we reasonably need it to determine Product availability, comply with Applicable Law, provide a paid feature, process a warranty or refund request, or run a promotion. A Third-Party Service may separately require identity or transaction verification under its own terms. OneKey will never ask for your Recovery Phrase, Passphrase or private keys.

4.1 You alone control your Digital Assets. Your private keys are generated and stored on your OneKey Device or, for a Software Wallet, stored in encrypted form on your own phone or computer. Your Digital Assets are recorded on public blockchains. They are never deposited with, held by or controlled by OneKey. Section 6.5 explains the different security model of the optional Keyless Wallet.

4.2 OneKey is a technology provider. OneKey is not a custodian, bank, exchange, broker, dealer, money transmitter, payment institution, investment adviser, agent, trustee or fiduciary, and nothing in these Terms or in your use of the Products creates any such relationship. OneKey owes you no duties other than those expressly set out in these Terms or imposed by Applicable Law.

4.3 OneKey cannot:

4.4 Recovery depends on the wallet model. For a wallet created with a Recovery Phrase, that Recovery Phrase (and any Passphrase) is the essential backup needed to restore access if your device is lost, stolen, damaged, reset or wiped. A Cloud Backup applies only as described in Section 6.6 and does not back up the private keys of a OneKey Device. A Keyless Wallet uses the separate recovery model described in Section 6.5. If you lose every recovery method applicable to your wallet, you may permanently lose access to your Digital Assets, and OneKey cannot recover them for you.

4.5 Never share your Recovery Phrase. OneKey, its support staff and its Authorized Resellers will never ask for your Recovery Phrase, Passphrase or private keys, whether by support chat, email, phone, social media or in person. Anyone who asks for them is attempting to steal from you.

4.6 You are responsible for instructions and transactions properly authorised using your OneKey Device or Credentials. Any transaction, signature or approval made with your OneKey Device or Credentials is treated as authorised by you.

The seller identified at checkout is responsible for the sale, delivery, returns and any statutory obligations that apply to that sale. Purchases of OneKey Devices and Backup Products are also governed by the terms shown at checkout and by the shipping, returns and warranty terms published in the OneKey online store, which include OneKey's limited product warranty. OneKey Devices bought from OneKey or an Authorized Reseller are covered against manufacturing defects and hardware malfunctions under normal use for one (1) year from the date of purchase, or any longer period stated in the applicable store terms or required by Applicable Law. If OneKey confirms a covered defect, OneKey will, at its option, repair or replace the device or refund the price you paid. TO THE EXTENT PERMITTED BY APPLICABLE LAW, THESE ARE YOUR SOLE AND EXCLUSIVE REMEDIES UNDER THE LIMITED PRODUCT WARRANTY. The warranty does not cover loss of Digital Assets; damage from accident, misuse, liquids or unauthorised repair; devices modified or running unofficial Firmware; normal wear; or devices not bought from OneKey or an Authorized Reseller.

Buy OneKey Devices only from OneKey's official store or an Authorized Reseller, and verify the seller against the then-current official Reseller Network page. When your device arrives, retain the order and delivery records, check that the package and device show no sign of opening, substitution or modification, download the OneKey App only from an official source, run the device authenticity check, and make sure the device generates a new Recovery Phrase for you during setup.

Stop, do not connect or activate the device, do not transfer Digital Assets to it, retain the device, packaging and purchase records, and contact OneKey support through an official channel if: the device arrives with a PIN already set or already initialised; a Recovery Phrase comes printed, pre-filled or supplied by anyone; the packaging or device appears opened, substituted or tampered with; the authenticity check fails or produces an unexpected result; you receive an unsolicited replacement device; or anyone tells you to install software from an unofficial source or use a Recovery Phrase they provide. OneKey is not responsible for devices that were not bought from OneKey or an Authorized Reseller, second-hand or counterfeit devices, or devices showing signs of tampering that you knowingly set up without first contacting OneKey support.

Your OneKey Device generates your Recovery Phrase offline. Write it down on the recovery card supplied or on a Backup Product, and keep it somewhere safe. Never photograph it, type it, store it digitally, upload it to the cloud, or enter it into any phone, computer or website. Choose a PIN others cannot guess. After a set number of incorrect PIN entries, your OneKey Device will erase itself, and you will only be able to restore your wallet with your Recovery Phrase. If you use a Passphrase, you will need it in addition to your Recovery Phrase to access the hidden wallet it creates. OneKey cannot recover a forgotten Passphrase, and a hidden wallet whose Passphrase is lost is permanently inaccessible.

The screen of your OneKey Device is the only trustworthy display of what you are about to sign. Your phone, computer, browser or the OneKey App may be compromised without your knowledge. Before you approve anything, check on the device screen the recipient address, the amount, the network, the fees and, for smart contract interactions, the contract and the permissions requested. If what the device shows does not match what you intended, or if you cannot fully verify it, reject it. Signing data that your OneKey Device cannot fully display in readable form, including when blind signing is enabled, is entirely at your own risk. A transaction approved on your OneKey Device is authorised by you.

Install Firmware and Firmware updates only through the OneKey App or other official OneKey tools. Make sure your Recovery Phrase is backed up before you update. We may release updates to address vulnerabilities, maintain compatibility or comply with law; a security-critical update may be required before affected functions can continue. We may end support for older Firmware or device models after reasonable notice where practicable, but will take reasonable steps to explain how users may continue to access self-custodied assets with compatible tools. If you install unofficial or modified Firmware, alter the bootloader, open the device or modify its hardware, your warranty ends and you bear all resulting risk. Where Firmware or OneKey App source code is published under an open-source licence, your rights in that code are governed by that licence and nothing in these Terms restricts them. That licence does not extend the OneKey warranty or the right to use OneKey trademarks to any modified build.

OneKey Devices are designed to protect private keys and authentication data against a range of attacks, but no device, packaging control or authenticity check can be guaranteed to resist or detect every attack. Risks include sophisticated physical, side-channel or fault-injection attacks; malicious implants, component substitution or other tampering before delivery; compromised host devices or unofficial software; and future weaknesses in cryptographic standards, blockchain protocols or technologies such as quantum computing. Keep your device physically secure, use a strong PIN, follow official security notices and, for significant holdings, consider using a Passphrase and separating holdings across wallets.

If OneKey reasonably believes that a device batch, Firmware version, app release, distribution channel or integrated service may present a material security risk, OneKey may issue an official security advisory and may require an update, suspend activation or affected online functions, arrange inspection, repair, replacement or recall, or recommend that you migrate assets or authentication credentials to a new wallet or device. Follow the instructions in the advisory promptly and verify every advisory through OneKey's official website or Help Center. Except where immediate action is reasonably necessary to protect users or comply with law, OneKey will give reasonable notice and explain the affected products and recommended steps. Any repair, replacement, recall or refund remains subject to the applicable warranty, sale terms and non-excludable rights under Applicable Law.

OneKey cannot locate, disable or recover a OneKey Device. If your device is lost, stolen or damaged, restore your wallet on a new device with your Recovery Phrase (together with any Passphrase you have set). A Keyless Wallet can be restored only through the process described in Section 6.5. If your device or Recovery Phrase may have been exposed to someone else, move your Digital Assets to a new wallet with a new Recovery Phrase as soon as possible.

You are responsible for the physical security of your Backup Products. Anyone who obtains a OneKey KeyTag, or a OneKey Lite card together with its PIN, may be able to read your Recovery Phrase. OneKey is not responsible for the loss, damage, theft or unauthorised use of a Backup Product.

Follow the user guide and safety instructions that come with your device, including those on charging, batteries, temperature and liquids. OneKey Devices contain small parts and are not toys. Do not use a device or battery that is damaged, swollen or overheating.

The OneKey App works with OneKey Devices and with other compatible wallets. Some features, such as viewing balances and prices, work without a device. When you use the OneKey App with a OneKey Device, Section 5.4 applies: rely on the device screen, not the OneKey App display.

If you create or import a wallet whose private keys are stored in the OneKey App on your phone or computer (a "Software Wallet"), the keys are encrypted with your OneKey App password and stored only on that device. A Software Wallet is only as secure as the device it runs on: malware, a compromised or jailbroken or rooted operating system, or someone who learns your OneKey App password may be able to take your Digital Assets. Software Wallets are less secure than OneKey Devices, and we recommend a OneKey Device for significant amounts. OneKey is not responsible for losses caused by the compromise of your phone, computer, operating system or browser.

If you add a watch-only address or connect a wallet made by another provider, OneKey has no control over the security of that address or wallet.

Certain OneKey Device models may generate time-based one-time passwords or operate as a security key with compatible third-party accounts or services. Those functions authenticate access to the relevant third-party account; they do not make OneKey the operator of that account or service. Compatibility, enrolment and account recovery depend on the third party's implementation. Before relying on an authentication function, configure an alternative recovery method with the relevant service. Loss, reset, damage, modification or discontinuance of a device or related software may prevent authentication. OneKey cannot reset a third-party account or recreate an authentication token or credential that OneKey does not hold.

The optional Keyless Wallet lets you create and restore a wallet using a Google or Apple sign-in and a Recovery PIN, without writing down a Recovery Phrase. The secret needed to restore your Keyless Wallet is encrypted and split into separate parts: one is stored on OneKey's servers and linked to your Google or Apple sign-in, another is stored with an independent PIN-protected key storage network, and the information needed to combine them is kept on your device. Restoring requires both your Google or Apple sign-in and your Recovery PIN. OneKey cannot, by itself, reconstruct your private keys or move your Digital Assets. You understand that:

If you enable Cloud Backup, an encrypted backup of your Software Wallet data is stored in your own iCloud or Google Drive account. It is protected by a password you set. OneKey cannot access your backup or recover that password, and the availability of your backup depends on Apple or Google. Cloud Backup never includes the private keys of a OneKey Device.

You are responsible for keeping your OneKey ID account and the email or sign-in method linked to it secure. OneKey Prime is a paid subscription governed by the purchase terms shown when you subscribe. Suspension or closure of a OneKey ID account does not affect your control of Digital Assets in a self-custody wallet.

The OneKey App may show address risk checks, phishing site warnings, token risk labels, transaction simulations, approval management tools and similar alerts ("Warnings"). Warnings rely partly on third-party data and may be wrong, incomplete or missing. The absence of a Warning does not mean that an address, token, contract or website is safe. If you proceed after a Warning is shown, you do so entirely at your own risk. Whether or not a Warning is shown, you are solely responsible for every transaction, signature and approval you make.

Use the OneKey App only with networks and assets it supports. Sending Digital Assets on an unsupported network or to an incompatible address may result in permanent loss, and OneKey cannot recover them. Custom networks, custom RPC endpoints and custom tokens that you add are used entirely at your own risk. OneKey may add or remove support for any network, asset or feature at any time. Removal of support does not take away your control of Digital Assets on the blockchain, which you can still access with your Recovery Phrase in another compatible wallet.

Prices, charts, market data, yields, risk ratings, news and other information in the Products come largely from third parties, may be delayed or inaccurate, and are provided for information only. Nothing in the Products is investment, financial, legal or tax advice, or a recommendation to buy, sell or hold any Digital Asset.

Subject to these Terms, OneKey grants you a personal, limited, non-exclusive, non-transferable, revocable licence to install and use the OneKey App, and to use the Firmware on your OneKey Device, for lawful purposes. Except as permitted by an applicable open-source licence or by Applicable Law, you must not copy, modify, distribute, sell or sublicense the Products, remove any proprietary notices, or circumvent any security feature.

We may update, change, suspend or discontinue any feature of the Products. We may require you to install updates, and older versions may stop working or stop receiving support. Where practicable, we will give notice before discontinuing a material feature.

7.1 The OneKey App may give you access to Third-Party Services, including swap and bridge aggregators and decentralised exchanges, staking and yield protocols, lending and borrowing protocols, perpetual futures platforms (currently including Hyperliquid where available), fiat on-ramp and off-ramp providers, Lightning Network services, decentralised applications opened in the in-app browser, blockchain nodes and data providers. The services and providers available to you depend on your location, device, app version and the provider's own eligibility rules.

7.2 A Third-Party Service is operated by the identified third party or, for a decentralised protocol, by the relevant smart contracts and network participants. OneKey does not execute, clear, settle, custody or guarantee the transaction merely because the service is accessible through the OneKey App. Those activities do not make OneKey your counterparty, but they may affect what you see. A default or ranking may consider price, estimated speed, liquidity, availability, security or compliance information and commercial factors; it is not a promise of best execution or the best available outcome. You choose whether to proceed and sign every on-chain transaction with your own keys.

7.3 Before you first use a Third-Party Service, the OneKey App will identify the available provider or protocol and give you access to its applicable terms and privacy notice, or explain that an autonomous protocol has no identifiable contracting operator. You are responsible for reviewing and accepting the applicable third-party terms. A provider may conduct KYC or KYT checks, reject or delay a transaction, restrict a jurisdiction, freeze or return funds where it is legally or contractually permitted to do so, and charge its own fees. Questions about execution, settlement, refunds or provider-held funds must be directed to that provider, although OneKey may offer reasonable interface or status support.

7.4 OneKey may receive compensation in connection with Third-Party Services, including a service fee paid by you, a referral commission, a builder fee calculated by reference to trading activity, or a protocol-funded performance or distribution fee. Before you confirm a transaction, the interface will show any fee charged directly to you and, where required by Applicable Law or material to your decision, the nature or basis of compensation OneKey receives from the provider. Provider fees, spreads, network fees and other charges may be separate.

7.5 Token approvals and other permissions you grant to smart contracts may remain valid indefinitely and can be used to take your Digital Assets long after you grant them. Review and revoke approvals you no longer need.

7.6 To the maximum extent permitted by Applicable Law, OneKey is not responsible for the acts, omissions, insolvency, security failures or contractual breaches of a Third-Party Service, or for losses caused by a smart contract or network that OneKey does not control. OneKey may, at its discretion, provide reasonable assistance with transaction-status enquiries or communications, but doing so does not make OneKey the provider or guarantor of the Third-Party Service. This Section does not release a OneKey Party from liability for its own breach, negligence, misleading statement or other liability that cannot lawfully be excluded.

7.7 Swaps and bridges. Quotes and routes are supplied by third-party providers and may change before execution. Unless the interface expressly states that routing is automatic, you make the final provider and route selection. A cross-chain bridge may lock, burn, mint or release assets through several networks or contracts, creating risks of delay, message failure, insufficient liquidity, smart-contract exploit, de-pegging and permanent loss. Review the provider, minimum received amount, slippage, fees, destination network and token contract before signing.

7.8 Earn, staking and DeFi. Yield and reward rates are estimates, not promises, and may change or become zero. These services are not bank deposits and are not insured. Assets may be locked, subject to unbonding periods, slashing, smart-contract or oracle failures, de-pegging, liquidity shortages, governance changes and loss of principal. OneKey does not promise repayment or a minimum return.

7.9 Perpetual futures and other leveraged products. These products are high-risk derivatives and are not offered to users in a Restricted Location or where Applicable Law prohibits them. Collateral may be held or controlled by the third-party platform, and adverse price movements may cause rapid or total liquidation. The provider, not OneKey, determines leverage, margin, pricing, liquidation and settlement rules. OneKey may receive a builder fee as disclosed under Section 7.4, but does not receive your trading losses. Do not use a leveraged product unless it is lawful where you are located and you can bear the loss of all collateral and any additional liability permitted by the provider's terms.

7.10 Fiat on-ramp and off-ramp. Fiat payment, identity verification, exchange, delivery and refund functions are performed by the provider identified in the relevant WebView or redirected page and may involve downstream payment or exchange providers. OneKey may pre-fill your wallet address but does not itself receive, transmit, convert or settle your fiat or Digital Assets in that transaction. Once you transfer funds or assets to a provider, they may no longer remain under your self-custody until delivered or returned. Check the provider, payment recipient, exchange rate, spread, fees, delivery address and refund rules before proceeding.

7.11 DApp browser. The in-app browser is a general access tool. Unless expressly stated, listing, search results, bookmarks or access through the browser are not an endorsement or security approval of a DApp. OneKey may remove, block or warn about a DApp, address or contract for legal, sanctions, fraud, gambling, adult-content or security reasons, but cannot review every DApp or prevent you from reaching it through other software. You remain responsible for checking the DApp, domain, contract, permissions and legality before connecting or signing.

8.1 The prices of OneKey Devices and Backup Products are shown at checkout.

8.2 The core features of the OneKey App are free. Certain features may carry a OneKey fee or generate compensation to OneKey, including swap or bridge service fees, perpetual futures builder fees, protocol-funded performance or distribution fees, referral commissions and OneKey Prime subscriptions. Fees charged directly to you are shown before confirmation; compensation paid by a provider is disclosed in accordance with Section 7.4.

8.3 Network fees (gas) are paid to the relevant blockchain network, not to OneKey. They may be charged even if a transaction fails, and they cannot be refunded by OneKey. Third-Party Services may also charge their own fees.

8.4 Fees are non-refundable except as stated in the applicable purchase terms or required by Applicable Law.

8.5 You are responsible for determining, reporting and paying any taxes that apply to your transactions and use of the Products.

9.1 You must comply with Applicable Law when using the Products. You must not:

9.2 If you breach this Section 9, OneKey may take any action under Section 10, decline any related warranty, refund, promotion or compensation request, and report the matter to the relevant authorities.

10.1 You may stop using the Products at any time. Your self-custodied Digital Assets remain recorded on the relevant blockchain and, subject to the recovery model and compatibility of your wallet, remain accessible using the applicable Credentials or recovery method.

10.2 OneKey may restrict, suspend or terminate your access to all or part of the OneKey App, OneKey ID, OneKey Prime, any promotion or any other OneKey service, with or without notice, if:

Our decisions may rely on confidential risk and security criteria, which we are not required to disclose where disclosure would compromise security or breach Applicable Law.

10.3 OneKey may prevent the OneKey App from interacting with addresses, contracts or websites that are sanctioned or that we reasonably believe are malicious or high-risk.

10.4 Restriction of your access to the OneKey App or a OneKey service never gives OneKey control over your self-custodied Digital Assets. You can always restore your wallet with your Recovery Phrase (together with any Passphrase you have set) in another compatible wallet; a Keyless Wallet can be restored only through the recovery process described in Section 6.5, which depends on the continued availability of the services referred to in that Section. Refunds of prepaid subscriptions are handled under the applicable purchase terms and Applicable Law.

11.1 OneKey and its licensors own all intellectual property rights in the Products and in the OneKey name, logos and trademarks. Open-source components are licensed under their own licences. These Terms do not transfer any intellectual property to you.

11.2 If you send us suggestions, ideas or other feedback, you grant OneKey a worldwide, perpetual, irrevocable, royalty-free, transferable and sublicensable licence to use it for any purpose, without any obligation to credit or compensate you.

11.3 Security vulnerability reports are welcome through OneKey's official bug bounty programme. Any reward is governed by that programme's rules.

Our Privacy Policy explains how we handle personal data and forms part of these Terms. Blockchain addresses and transactions are public and may be linked to you. When you request a Third-Party Service, information reasonably necessary to display, route, support or account for that service—such as your wallet address, transaction details, country or region, device or app information and referral identifier—may be sent to or received from the relevant provider as described in the Privacy Policy and the provider's privacy notice. OneKey never receives your Recovery Phrase, Passphrase or the private keys stored on a OneKey Device.

13.1 You confirm that you have enough knowledge of Digital Assets, blockchains, private keys and self-custody to understand the risks of using the Products, and that you have read the guides OneKey provides in its Help Center.

13.2 You understand and accept, among other risks, that:

14.1 Except for the limited warranty for OneKey Devices described in Section 5.1 and any rights that cannot be excluded under Applicable Law, the Products are provided "as is" and "as available", and OneKey disclaims all other warranties, conditions and representations, whether express, implied or statutory, including any implied warranties of merchantability, satisfactory quality, fitness for a particular purpose, title and non-infringement.

14.2 Without limiting Section 14.1, OneKey does not warrant that:

14.3 Where Applicable Law does not allow implied warranties to be excluded, they are limited to the warranty period described in Section 5.1, to the extent the law permits.

Nothing in these Terms excludes or limits OneKey's liability for:

Sections 15.2 to 15.9 apply subject to this Section 15.1.

To the maximum extent permitted by Applicable Law, the OneKey Parties shall not be liable for any indirect, incidental, special, consequential, exemplary or punitive damages, or for any loss of profits, revenue, business, opportunity, goodwill, data or anticipated savings, however caused, even if advised of the possibility of such loss.

Without limiting Section 15.2, and to the maximum extent permitted by Applicable Law, the OneKey Parties are not liable for any loss, including loss of Digital Assets, arising from:

Subject to Section 15.1, and to the maximum extent permitted by Applicable Law, the OneKey Parties are not liable for loss of Digital Assets or their value to the extent caused by the self-custody, market, blockchain, user-security or third-party risks described in these Terms. OneKey Devices and the OneKey App are tools for managing your own keys and do not insure or guarantee the value of Digital Assets. This Section does not exclude liability to the extent a loss was directly caused by a defect in a Product, a misleading statement or a security failure attributable to a OneKey Party and that liability cannot lawfully be excluded or limited.

If, despite Sections 15.2 to 15.4, any OneKey Party is held liable to you, then to the maximum extent permitted by Applicable Law, the total aggregate liability of the OneKey Parties to you for all claims arising out of or in connection with the Products or these Terms, whether in contract, tort (including negligence), breach of statutory duty or otherwise, shall not exceed the greatest of:

This is a single aggregate limit. Multiple claims, events or legal grounds do not increase it.

The OneKey App and most OneKey services are provided free of charge. The price of a OneKey Device does not include insurance of Digital Assets. OneKey never controls your Digital Assets or Credentials and cannot know how much you choose to store. You are best placed to protect your Credentials, to decide how much to store, and to obtain insurance if you want it. These limits are an essential basis of the bargain between you and OneKey and allow OneKey to offer the Products at their current prices or free of charge.

Each of the OneKey Parties may rely on and enforce Sections 15 and 16 under the Contracts (Rights of Third Parties) Ordinance (Cap. 623 of the Laws of Hong Kong). The limit in Section 15.5 applies to all OneKey Parties together.

To the maximum extent permitted by Applicable Law, any claim against a OneKey Party must be commenced, by delivering a Notice of Dispute under Section 17.2, within one (1) year after you first knew, or reasonably should have known, of the facts giving rise to it, and arbitration or court proceedings on that claim must then be started within six (6) months after the negotiation period in Section 17.2 ends. This contractual period does not apply to a Consumer claim, product-liability claim or other claim where Applicable Law does not permit a shorter contractual period. Where Applicable Law requires a longer minimum period, that longer period applies.

If you are a Consumer and mandatory laws where you live give you rights that cannot be limited by contract, such as statutory guarantees of product quality, these Terms do not limit those rights. To the extent those laws allow, OneKey's liability for breach of such a right is limited to repairing or replacing the relevant Product or refunding the price you paid for it.

OneKey may, at its sole discretion, offer a payment, replacement or other assistance to any user. Any such offer is a goodwill gesture only. It is not an admission of liability, does not set a precedent, and creates no obligation to you or to anyone else. OneKey may require you to sign a release of claims as a condition of accepting it.

Each of Sections 15.2 to 15.5, and each item listed in Section 15.3, is a separate and independent provision. If any of them is held unenforceable for a particular claim, the others continue to apply to that claim, and Section 15.5 continues to limit any liability that remains.

16.1 To the maximum extent permitted by Applicable Law, you will indemnify the OneKey Parties against third-party claims and reasonable, documented direct losses to the extent caused by your intentional or reckless breach of these Terms, your unlawful use of the Products, or your knowing infringement of a third party's rights. This indemnity does not apply to the extent a loss is caused or increased by a OneKey Party's breach, negligence, fraud, wilful misconduct or failure to mitigate. If you are a Consumer, the indemnity applies only to the extent it is fair, reasonable and enforceable under Applicable Law.

16.2 OneKey may assume control of the defence of any matter covered by Section 16.1, and you will cooperate with OneKey. You must not settle any such matter without OneKey's prior written consent.

These Terms, and any non-contractual obligations arising out of or in connection with them, are governed by the laws of Hong Kong, without regard to its conflict of laws rules.

Before starting formal proceedings, you should send a written notice ("Notice of Dispute") to [email protected] stating your name and contact details, the relevant order number, wallet addresses or transaction hashes where appropriate, a description of the dispute and the relief you seek. Do not include your Recovery Phrase, Passphrase, private keys or full payment-card details. OneKey will send any Notice of Dispute to the contact details it holds for you. You and OneKey will try in good faith to resolve the dispute within sixty (60) days after the Notice of Dispute is received. These discussions are confidential and without prejudice. This process does not prevent either party from seeking urgent relief, preserving a limitation period, reporting to a regulator or law-enforcement authority, or exercising a non-waivable Consumer right.

Subject to Sections 17.6 to 17.8, any Dispute shall be referred to and finally resolved by arbitration administered by the Hong Kong International Arbitration Centre (HKIAC) under the HKIAC Administered Arbitration Rules in force when the Notice of Arbitration is submitted. The seat is Hong Kong, the tribunal consists of one arbitrator, and the language is English. The tribunal may allocate arbitration costs and reasonable legal fees in accordance with the applicable rules and law.

The arbitration, including its existence, the submissions and evidence and any award, is confidential in accordance with section 18 of the Arbitration Ordinance (Cap. 609 of the Laws of Hong Kong) and the HKIAC rules, except as needed to enforce or challenge an award or as required by Applicable Law. This Section does not stop you from reporting a matter to a regulator or law enforcement authority, or from making truthful statements about your own experience with the Products, provided you do not disclose the confidential materials of the arbitration.

You and OneKey may each bring claims against the other only in an individual capacity, and not as a claimant or class member in any class, collective, consolidated or representative proceeding. No arbitration may be consolidated with another, or conducted on a class or representative basis, without OneKey's written consent, and the arbitrator may not award relief on a class or representative basis. If this Section 17.5 is found unenforceable for a particular Dispute, that Dispute shall be decided by the courts of Hong Kong and not in arbitration, and shall remain an individual claim to the extent Applicable Law permits.

Despite Section 17.3:

If Section 17.3 otherwise applies to you, you may opt out of Sections 17.3 to 17.5 by emailing [email protected] with the subject line "Arbitration Opt-Out" and your name and contact email within thirty (30) days after you first accept these Terms. If you opt out, the courts of Hong Kong have exclusive jurisdiction, except where Applicable Law provides otherwise.

This Section 17 applies to Disputes arising before or after these Terms take effect, except Disputes already filed in a court or arbitration before that date.

To the maximum extent permitted by Applicable Law, any Dispute shall be referred to and finally resolved by arbitration administered by HKIAC. Nothing in this Section limits any right or remedy that cannot lawfully be waived or restricted.

18.1 We may change these Terms. We will publish the updated Terms with a new version number and date. For material changes, we will also notify you through the OneKey App or our website, and by email if we have your email address.

18.2 A material change that is adverse to you takes effect no earlier than fourteen (14) days after we notify you, except that a change required by Applicable Law or made to address a security risk may take effect immediately.

18.3 Where a change is material, we will ask you to accept the changed Terms in the OneKey App or, for an account-based service, when you next sign in, and the changed Terms take effect for you when you accept them, even if that is earlier than the date determined under Section 18.2. A change that is not material takes effect on the date stated in the notice or, if no date is stated, on publication, and you accept it by continuing to use the Products after that date. If you do not agree to a change, you must stop using the Products.

18.4 A change does not apply to a Dispute for which a Notice of Dispute was delivered before the change took effect.

18.5 Updates to Annex 1 (Restricted Locations) or to the geographic availability of a Product or service under Section 3.3 do not constitute an amendment to these Terms, take effect immediately upon publication in the OneKey App or on OneKey’s website, and do not require separate notice or acceptance, unless otherwise required by Applicable Law.

OneKey is not liable for any delay or failure to perform caused by events beyond its reasonable control ("Force Majeure Events"), including natural disasters, epidemics, war, terrorism, civil unrest, labour disputes, acts of government, sanctions, failures of blockchains, the internet, power, telecommunications, cloud providers, suppliers or carriers, and cyberattacks, except a cyberattack that succeeds because OneKey failed to take reasonable security precautions.

These Terms, including the Additional Terms, the Privacy Policy and Annex 1 (Restricted Locations), are the entire agreement between you and OneKey about the Products and replace all earlier agreements and understandings on that subject.

You have not relied on any statement, promise or representation that is not set out in these Terms, except a statement made fraudulently. No statement by OneKey support staff, Authorized Resellers, ambassadors or community moderators changes these Terms or creates any obligation for OneKey, unless an authorised OneKey representative confirms it in writing.

If any provision of these Terms is found invalid or unenforceable, it will be enforced to the maximum extent permitted and the remaining provisions remain in full force. In particular, if any part of Section 15 is unenforceable for a particular claim, OneKey's liability for that claim is limited to the maximum extent Applicable Law permits.

A failure or delay by OneKey in exercising any right is not a waiver of it.

To the maximum extent permitted by Applicable Law, you may not assign or transfer these Terms or any right or claim under them without OneKey’s prior written consent, which OneKey may grant or withhold in its sole discretion, including to a purchaser of claims, a litigation funder or a collective claims vehicle, and any attempt to do so is void. OneKey may assign or novate these Terms to an Affiliate or to a successor in connection with a merger, acquisition or reorganisation, and will notify you if it does.

OneKey may give you notices through the OneKey App, by email, or by publishing them on our website. You must send legal notices to OneKey at [email protected]. For support, use the official OneKey Help Center at help.onekey.so.

You and OneKey are independent parties. Nothing in these Terms creates a partnership, joint venture, agency, employment or fiduciary relationship.

OneKey's records of support communications, orders, acceptance of Terms, security notices and warranty requests may be used as evidence in a Dispute to the extent permitted by Applicable Law. Support calls may be recorded only after appropriate notice and in accordance with the Privacy Policy and Applicable Law. You may keep your own copies of notices, orders and transaction records.

These Terms are written in English. Any translation is provided for convenience unless the translated version expressly states that it is legally binding. If a non-binding translation differs from the English version, the English version prevails.

Except for the OneKey Parties under Sections 15.7 and 16, no one other than you and OneKey has any right under the Contracts (Rights of Third Parties) Ordinance (Cap. 623 of the Laws of Hong Kong) to enforce any term of these Terms.

Sections 4, 5.1, 7.6, 11, 13 to 17 and 20, and any other provision that by its nature should survive, survive the end of your use of the Products.

Headings are for convenience only. "Including" means "including without limitation".

If you download the OneKey App from Apple's App Store, Google Play or another app marketplace, that marketplace's terms also apply. The marketplace is not responsible for the App, its support or any transaction made through it, except to the extent required by its terms or Applicable Law. OneKey, not the marketplace, is responsible for addressing claims relating to the App to the extent provided in these Terms and Applicable Law. Any third-party beneficiary rights required by the marketplace's standard terms are preserved.

21.1 For new users, these Terms take effect when you accept them on or after 24 October 2026.

21.2 If you used the Products before that date, these Terms take effect on the date stated in the notice provided to you, which will be no earlier than fourteen (14) days after notice unless an immediate change is reasonably required by Applicable Law or to address a material security risk. Where Section 18.3 requires affirmative acceptance, the relevant change takes effect for you only when accepted. Until then, the version you previously accepted continues to apply, except to the extent an immediate security or legal change is validly implemented.

21.3 Earlier versions are available on request through the Help Center.

ONEKEY LIMITED (壹匙有限公司), Business Registration Number 73618989

Registered office: 0F-129, 4/F, 9 Queens Road Central, Central, Hong Kong

Legal notices: [email protected]

Support and security reports: help.onekey.so