Cold custody · 2026 playbook

Stop Approving Treasury Transactions You Can’t Decode—in 48 Hours You Can Standardize on OneKey

Your committee already approved the policy. The gap is execution: humans still click “confirm” on summaries that hide contract methods. OneKey’s pitch is simple—decode before you sign—then route idle inventory through a controlled Earn flow when the board says yield is acceptable.

The mechanism: hardware that shows the contract story

OneKey documents SignGuard as transaction decoding on-device: address, amount, method, and approval scope, with flags for suspicious patterns before you commit. Pair that with multiple EAL 6+ rated secure elements (as described on their Pro product page), QR-based air-gapped signing, and a touchscreen + fingerprint path for repeat operations.

For compliance and architecture reviewers: the app stack is marketed as open source with third-party audits (e.g. SlowMist cited on product pages)—use that for your internal evidence pack, then verify the current audit letter and firmware release notes before sign-off.

Earn tab: treasury yield without abandoning custody discipline

When policy allows non-custodial staking or yield programs, OneKey’s in-app Earn flow (documented in their Help Center) is a structured alternative to improvising in random DeFi front-ends. Always map provider choice to your risk register.

Official flow summary from Stake and earn cryptos in OneKey App:

1. Open Earn: In the OneKey App, use the bottom Earn tab and pick the asset (Solana is listed among supported assets in their article).
2. Pick a provider: Choose a staking service provider from the list; document the rationale in your runbook.
3. Review terms: On the asset screen, capture staking conditions, reward mechanics, and redemption timing.
4. Enter amount → Continue: APR shown is variable; snapshot estimates for audit trail, not promises.
5. Confirm details: Redemption duration and reward collection method must match policy.
6. Submit on-chain: Second confirm sends the transaction; wait for confirmations.
7. Monitor status: Track transaction state from the asset view; staking history may be unavailable for some assets (their docs note limitations for BTC and ATOM).
8. Wait for Active: Rewards accrue after status moves to Active—expect provider-specific delays.

Supported assets listed in that help article include Bitcoin, Ethereum, USDC, USDT, Dai, Solana, Matic, Atom, Aptos, CBTC, WBTC, and WETH—treat the list as vendor documentation subject to change.

Procurement checklist (paste into your vendor memo)

• Firmware update channel owned by IT or security—not individual traders.
• Mandatory “decode every approval” drill tied to SignGuard fields.
• Segregation: operational hot limits vs hardware-backed treasury.
• Earn provider due diligence: slashing, lockups, regulatory posture.
• Recovery test with Lite or seed backup in a controlled exercise.

← Back to Blog