Crypto HK 香港加密資產

05/11/2026

2026稅務新規淺談
作者︰林殷桓
香港加密資產CEO

香港《2026年稅務（修訂）（加密資產申報框架及經修訂的共同匯報標準）條例草案》已在6月3日首讀，並在11月4日通過，修訂的核心內容是加入《稅務條例》第8B部的第50M至50Y條。

以上條文簡單而言，就是更新香港稅務申報系統，並接駁至國際間的《加密資產申報框架》。具體要求加密資產服務提供者、以及受經修訂共同匯報標準約束的財務機構必須核對客戶的稅務居住地，而且必須把客戶姓名、地址、稅務編號和交易匯總交給當地稅局。

歐洲的DAC8已由2026年1月1日起收集。現在法例修訂案已通過，香港本地機構需由2027年1月1日起收集客戶資訊，2028年度首次通報外地稅局，不設追溯期。因此，該日期前在店內以法幣換成加密貨幣、再直接轉入錢包的交易，不屬於首份表格的範圍。Crypto HK香港加密資產無此義務，亦不會把這些交易記錄進行呈報。

幣圈人士普遍擔憂的是，修訂案通過後會否產生新的稅項。

如你是一位只活動在香港本地的居民，稅務修訂對你沒有影響。修訂案只是完善稅務申報機制，不牽涉加徵新稅項。在香港，如非以業務形式經營，一般市民無需就資產增值或金融市場所得繳稅。換言之，雖然香港稅局有條件獲知你的交易詳情及得益，但不會為此對你徵稅，除非將來香港加徵資產增值稅。當然，稅局獲知資料後，仍可查核該等得益是否屬業務收入。

然而，修訂案對在港外國人、移民港人、及擬移居外地人士，是有一定隱憂的。視乎當地之稅務規則，可能需就加密貨幣得益繳稅。尤其是擬移居國外或已移民海外但未獲得公民身份的港人，由於當地稅局有可能已通過《加密資產申報框架》獲取相關財務資訊，漏報相關資產及得益，可能影響獲得外地公民權的進度，甚至直接被拒。

最後，Crypto HK香港加密資產提醒讀者，納稅乃公民責任。即使以現金買賣加密貨幣現時並不在通報機制範圍內，我們仍鼓勵大家如實申報，為自己居住的城市盡一份責任。

A Brief Overview of the 2026 Tax Changes
Author: Merton Lam
CEO, Crypto HK

Hong Kong’s Inland Revenue (Amendment) (Tax Reporting Framework for Crypto-Assets and Amendments to the Common Reporting Standard) Bill 2026 received its First Reading on June 3 and was passed on November 4. The key amendments involve the addition of Part 8B, comprising Sections 50M to 50Y, to the Inland Revenue Ordinance.

In simple terms, these provisions update Hong Kong’s tax reporting system and align it with the international Crypto-Asset Reporting Framework (CARF). Specifically, crypto-asset service providers and financial institutions subject to the revised Common Reporting Standard (CRS) will be required to verify their customers’ tax residences and submit information—including customers’ names, addresses, tax identification numbers, and aggregated transaction details—to the local tax authorities.

In Europe, data collection under DAC8 commenced on January 1, 2026. With the amendments now passed, Hong Kong-based institutions will be required to begin collecting customer information from January 1, 2027, with the first reporting to overseas tax authorities taking place in 2028. There will be no retrospective reporting requirement. This means that transactions completed before that date in which customers purchase cryptocurrency with fiat currency at a physical shop and then transfer it directly to their own wallets will not fall within the scope of the first reporting cycle. Crypto HK is not subject to this reporting obligation and will not report records of these transactions.

One of the main concerns among cryptocurrency investors is whether the passage of the amendments will introduce any new taxes.

For Hong Kong residents whose activities are conducted entirely within Hong Kong, these tax amendments will have no direct impact. The amendments simply improve the tax reporting mechanism; they do not introduce any new taxes. In Hong Kong, ordinary individuals are generally not required to pay tax on capital gains or gains from financial market investments, provided they are not carrying out such activities as a business.

In other words, although the Inland Revenue Department may have the means to obtain information about your transactions and profits, this does not mean that you will be taxed on those gains. This would only change if Hong Kong were to introduce a capital gains tax in the future. Of course, once the tax authorities have access to such information, they may still examine whether the gains should be classified as business income.

However, these amendments may raise certain concerns for foreign residents in Hong Kong, Hong Kong people who have emigrated, and those planning to move overseas. Depending on the tax rules in their respective jurisdictions, they may be liable to pay tax on cryptocurrency gains.

This is particularly relevant to Hong Kong residents who are planning to emigrate, as well as those who have already moved overseas but have not yet obtained citizenship in their new country. Since overseas tax authorities may already be able to obtain relevant financial information through the Crypto-Asset Reporting Framework, failure to declare such assets and gains could affect the progress of their citizenship applications, or even result in outright rejection.

Finally, Crypto HK would like to remind readers that paying taxes is a civic responsibility. Even though cryptocurrency transactions involving cash purchases are currently outside the scope of the reporting framework, we still encourage everyone to make full and accurate tax declarations and do their part for the community in which they live.

30/10/2026

史上最大加密貨幣盜竊: Binance幣安被盜 63 億美元

屬於Binance幣安交易所旗下的熱錢包於今日清晨約四點(UTC +8) 被盜計影響約 63 億美元，是歷來最大規模加密貨幣盜竊。初步指工程師裝置被入侵，出現未授權提款。Binance 稱會用 SAFU 同公司資金補損失，並正同各方凍結、追蹤相關資產；部分穩定幣發行商亦已凍結部分資金，幣安表示去承擔所有損失。

幣安用户應:
- 查清交易所餘額和看清楚有冇異常。
- ⁠在幣安恢復提款後將加密貨幣轉至冷錢包

如果有任何問題，請盡快聯絡我們。

Largest Crypto Heist Ever: Binance Hot Wallet Hit for ~$6.3 Billion

One of Binance’s hot wallet was hacked early this morning (around 4:00 a.m. UTC+8 / late October 29 UTC), with an estimated impact of about $6.3 billion — the biggest crypto theft on record. Early findings point to a compromised engineer’s laptop that allowed unauthorized withdrawals. Binance says user funds are safe, will cover all losses from its SAFU fund and company reserves, and is working with partners to freeze and track the assets (roughly half already frozen, including by stablecoin issuers).

Binance users should:
Check your exchange balance for any abnormalities.
Once withdrawals resume, move funds to a cold wallet.

If you have any questions, please contact us as soon as possible.

30/10/2026

29/10/2026

保障資金安全(3/3)：具體方法
作者︰嚴煒樂
香港加密資產行政總監

Safeguarding Your Assets (3/3): Practical Measures
Author: George Yim
Managing Director, Crypto HK

前兩篇談過中心化交易所的託管風險，以及單一品牌冷錢包在供應鏈上的弱點。資產放在別人手上，或只靠一台裝置，都不再足夠。較穩妥的做法，是把控制權拆開，而不是再換一個品牌。

技術門檻較低的，是在助記詞之外加一個自訂密碼，俗稱第25字。這個密碼不寫在助記詞紙上，而是由用戶另外記住或分開存放。沒有它，即使助記詞被盜，也進不了真正的錢包。筆者比較推薦是Trezor系列，設定過程在裝置上完成，不必把密碼打進電腦。其最新的Safe 7更把設定過程與軟體驗證改用抗量子算法，為未來的計算能力預留升級空間。對一般市民，這是目前較易上手的加強方案。

進一步的做法是多簽。把同一筆資產設成需要多個鑰匙共同批准才能轉出，例如三個鑰匙中要有兩個同意。關鍵是這幾個鑰匙分屬不同品牌的硬件錢包，分開放置，即使其中一台被植入或遺失，亦不影響基本安全。業界人士有時會用多方計算系統，把簽署過程分散到多個節點，原理相近，但這裡不詳談。

有些人仍在推薦古老的方法，以為在手機裝好熱錢包後拔掉網絡，就算離線保管。這是行不通的。手機晶片的設計目標是便利與性能，不是抵抗物理破解。十年前美國政府要求蘋果解鎖一部手機被拒後，法證業界已發展出多種直接讀取手機資料的工具，例如可讀取iPhone的Elcomsoft iOS Forensic Toolkit。一部遺失的手機，內容被讀出並不困難；若助記詞或私鑰在裡面，資產被轉走幾乎是必然。

保障財產的關鍵，仍然是機制：密碼與助記詞分開、簽署權分散、不把唯一的備份放在任何一部可被破解的裝置上。這些原則是不會過時的。

The previous two articles discussed the custodial risks of centralised exchanges and the supply-chain vulnerabilities of relying on a single brand of hardware wallet. Entrusting your assets to someone else, or relying on a single device, is no longer sufficient. A more robust approach is to distribute control rather than switch to another brand.

One relatively accessible method is to add a custom passphrase to your recovery seed, commonly known as the “25th word.” This passphrase should not be written down on the same piece of paper as your recovery seed. Instead, memorise it or store it separately. Without the passphrase, even if your recovery seed is stolen, an attacker cannot access the actual wallet. I particularly recommend Trezor series as the setup process of the “25th word” is completed on the device itself, meaning you do not have to enter the passphrase on a computer. Its latest Safe 7 model also adopts post-quantum algorithms for its setup process and software verification, providing room for future upgrades in anticipation of advances in computing power. For the general public, this is currently one of the more accessible ways to strengthen asset security.

A more advanced approach is multisignature (multisig). This involves configuring an asset so that multiple keys must jointly authorise a transaction before funds can be transferred. For example, a transaction might require approval from two out of three keys. The key is to use hardware wallets from different brands for these keys and store them in separate locations. This way, even if one device is compromised or lost, the overall security of the arrangement remains intact. Industry professionals sometimes use multi-party computation (MPC) systems, which distribute the signing process across multiple nodes. It is rather complicated so I will not go into further detail here.

Some people still recommend outdated methods, believing that installing a hot wallet on a phone and then disconnecting it from the internet is sufficient to keep the assets offline. This does not work. Smartphone chips are designed for convenience and performance, not resistance to physical attacks. Following the US government's failed attempt to compel Apple to unlock an iPhone ten years ago, the digital forensics industry developed various tools capable of extracting data directly from phones. One example is Elcomsoft iOS Forensic Toolkit, which can extract data from iPhones. Recovering the contents of a lost phone is not particularly difficult. If the recovery seed or private keys are stored on the device, the assets are almost certain to be transferred out by an attacker.

Ultimately, protecting your assets comes down to having the right mechanisms in place: keep the passphrase separate from the recovery seed, distribute signing authority, and never store your only backup on a device that could be compromised. These principles will stand the test of time.

28/10/2026

保障資金安全(2/3)：Ledger冷錢包的啟示
作者︰嚴煒樂
香港加密資產行政總監

本月初，東南亞經銷商CryptoBilis售出的Ledger硬件錢包出現被盜。犯罪集團通過CryptoBilis獲得正品後拆開，在螢幕下植入微型電路，在用戶創建錢包、顯示二十四個助記詞時讀取內容。再透過流動網絡外傳，鏈上估計損失約九千萬美元。Ledger聲稱受影響裝置來自該經銷商，其晶片、系統與直銷渠道未遭入侵；真正被擊破的，是產品離開工廠之後的分銷環節。社群對此表示存疑，但亦未有進一步證據。

Ledger是全球最廣泛使用的冷錢包品牌。使用硬件錢包的人，多數已有意避開交易所託管，屬注重財產安全的一群。這次他們仍然受害，說明黑客並不需要破解安全元件，只需找到整條供應鏈最弱的一環。正品可以在流通中被拆開再包裝，更新官方元件時的軟體檢查亦難以發現外加的零件。如是者，裝置看似離線，助記詞卻已在設定的那一刻外洩，保安形同虛設。

事件亦再次引發社群討論Ledger的一個結構性問題。由於Ledger設有雲端恢復助記詞的功能，把加密後的助記詞分片交由第三方保管。雖然不強制用戶採用，但系統上已存在可把助記詞導出的路徑，以資訊保安角度而言，這是一扇可被利用的後門。若把助記詞全盤交給Ledger保管，與放在交易所並無分別，只是中介換了名字。

冷錢包的原意是把私鑰從網絡隔離。但當裝置本身可能在流通中被動過手腳，單一品牌的硬件錢包可能就不再是終點。社群有必要重新檢視儲存方案，這個明天再論。

Safeguarding Funds (2/3): Lessons from the Ledger Cold Wallet
Author: George Yim
Managing Director, Crypto HK

Earlier this month, Ledger hardware wallets sold by the official Malaysia, Philippines, & Indonesia reseller CryptoBilis were compromised. A criminal group obtained genuine devices through CryptoBilis, opened them, and implanted a miniature circuit beneath the screen. When a user set up a wallet and the 24 word seed phrase was displayed, the implant captured it and transmitted it over a mobile network. On-chain estimates put the losses at about US$90 million.

Ledger claimed the affected devices came from that distributor, and that its chips, systems, and direct-sales channels had not been breached, what was actually broken was the distribution stage after the products left the factory. The community has voiced skepticism, but no further evidence has emerged.

Ledger is the world’s most widely used cold-wallet brand. Most people who use a hardware wallet have already chosen to avoid exchange custody; they are precisely the group that takes the safety of their assets seriously. That they were still hit shows that attackers do not need to crack the secure element. They only need to find the weakest link in the supply chain. A genuine device can be opened and resealed while in circulation, and software checks run when official components are updated are poorly placed to detect an added part. Yet the device looks offline, yet the seed phrase has already leaked at the moment of setup. Security, in that case, exists in name only.

The incident has also revived a community debate over a structural problem with Ledger. Ledger offers a cloud recovery feature for seed phrases, under which an encrypted seed phrase is split into shards and held by third parties. Use of the feature is not mandatory, but the system already contains a path by which the seed phrase can be exported. From an information-security standpoint, that is a backdoor that can be exploited. Handing one’s entire seed phrase to Ledger is no different from leaving it with an exchange—only the name of the intermediary has changed.

The point of a cold wallet is to keep the private key off the network. But when the device itself may have been tampered with somewhere in distribution, a hardware wallet from a single brand may no longer be the last word. The community needs to take a fresh look at how assets are stored. That is a subject for tomorrow.

27/10/2026

《保障資金安全(1/3)︰從三個交易所說起》
作者︰
嚴煒樂
香港加密資產行政總監

有聲音把今年視為加密資產復甦的一年，但卻有BitMEX、BitMart與CoinEx三家中型交易所相繼倒在終點前。BitMEX 於9月23日終止交易服務，作為永續合約發明者，在中止營運前市佔已不足萬分之一，公司聲稱儲備足以覆蓋負債，並非倒閉。BitMart在8月底停止交易，其後卻公布重組方案，把資金缺口追溯至2021年的被盜事件，大量帳戶至今未能提領資產，是影響最大的一家。CoinEx則表示平台收入有限，風險無限，繼續經營並不理性，所以決定在9月底停止現貨交易，平台聲稱儲備率逾百分百。筆者在3個交易所均有少量資產，也的確能提領BitMEX、CoinEx的部分，但BitMart的資產尚未取回。

三家各自因經營困難中止營運，其中BitMart已非有序清退，暴露了中型交易所的困局，這點市場上有大量分析，筆者沒有更精闢的看法，就不多說了。但在中心化風險方面，用戶資產放在中心化平台，安全程度完全取決於對方的資產負債表、內部管理與誠信，而不是用戶自身。即便平台事先預告清退、未有出現資不抵債，但仍可單方面強制平倉、加收手續費、關閉出入金，平台幣當然不用說，基本上歸零。儲備證明只是一時快照，不能防止平台把舊帳重提，也不能防止平台日後更改提領條件。

至於加強發牌的主張。牌照只能起到提高入場門檻的作用，卻不能取消對手方風險。合規成本上升，往往先擠走中型平台，把流動性進一步集中到少數巨頭；而一旦巨頭出事，對市場的傷害只會更大。過去的事故已經說明，市民誤以為政府監管本身就是保護，這種錯覺非常危險，有興趣的讀者可以多了解「監管俘獲」相關的理論。

每當加密貨幣似乎又重拾升軌，筆者都希望提醒大家，真正能保護自己的是機制，不是多一層的審批或監管。比特幣白皮書帶來的不單是一種新型的炒賣工具，而是把控制自己資產的權力重新賦予每位市民。不把餘額長駐任何交易所、不把私鑰交給中介、交易完成後即時交割，讓資產回到自己控制的錢包，是每位市民都能做到的自我保護。去中心化的意義不是在於抗拒規則，自我掌管資產亦不違反任何法例或道德，但就能讓「這家平台能營運多久」不再成為決定你的本金安全性的關鍵風險。這點不論是市民或業界人員都應重視。

然而，最近冷錢包的安全亦引起了社群關注，明天再論。

"Protecting Your Funds (1/3): Starting with Three Exchanges"
Author: George Yim
Managing Director, Crypto HK

Some people call this year a recovery year for crypto — yet three mid-sized exchanges, BitMEX, BitMart, and CoinEx, all fell just short of the finish line. BitMEX ended trading services on 23 September. As the inventor of perpetual contracts, its market share was already under 0.01% before it shut down; the company said its reserves were enough to cover liabilities and that it was not going bankrupt. BitMart stopped trading at the end of August, then announced a restructuring plan that traced its funding shortfall back to a 2021 hack. Many accounts still cannot withdraw — the biggest impact of the three. CoinEx said platform revenue was limited while risk was unlimited, so continuing was irrational; it decided to stop spot trading at the end of September, claiming a reserve ratio above 100%. I personally held small amounts on all three, was able to withdraw from BitMEX and CoinEx; BitMart funds have not come back yet.

Each stopped operations because of business difficulty. BitMart’s exit was not orderly, and that exposed the bind mid-sized exchanges are in. There is plenty of market analysis on that; I have nothing sharper to add, so I shall leave it there. On centralization risk: when you deposit assets on a centralized platform, their safety depends entirely on the counterparty’s balance sheet, internal controls, and integrity — not on you. Even if a platform announces an orderly wind-down and is not insolvent, it can still force-liquidate positions, raise fees, or shut deposits and withdrawals. Platform native tokens need little comment — they effectively become worthless. A proof of reserves is only a snapshot in time. It does not stop a platform from reopening old books, or from changing withdrawal terms later.

As for calls to tighten licensing: a license only raises the barrier to entry; it does not remove counterparty risk. Higher compliance costs often squeeze out mid-sized platforms first and push liquidity further into a few giants. If a giant then fails, the damage to the market is only greater. Past incidents already show how dangerous it is when the public mistakes government supervision itself for protection. Readers who want more can look into “regulatory capture.”

Whenever crypto looks to be climbing again, I want to remind everyone: what truly protects you is mechanism, not another layer of approval or regulation. Bitcoin’s white paper brought more than a new speculative tool — it gave every citizen back the power to control their own assets. Don’t leave balances parked on any exchange; don’t hand private keys to an intermediary; settle after a trade and move assets back to a wallet you control. That is self-protection anyone can practice. Decentralization is not about rejecting rules, and self-custody does not violate any law or ethics — but it does mean “how long can this platform keep operating?” is no longer the key risk to your principal. Citizens and industry practitioners alike should take that seriously.

Nevertheless, cold-wallet security has also drawn community attention lately. More on that tomorrow.

26/10/2026

近日多個嚴重網絡漏洞相繼曝光，當中影響大量 PHP 網站的遠端程式碼執行問題（社群常稱 PHP2Shell，公開編號包括 CVE-2026-109618、CVE-2026-109619）最受關注。

討論正熱之際，有人質疑漏洞只屬理論層面、並架起公開挑戰站 stealmybitcoin.com，在故意未修補的伺服器上放置與 Bitcoin 相關的密鑰材料，並以鏈上獎池作 reward，邀請外界來取。

這場 Steal my Bitcoin 挑戰由 Hacker News 帳號 cloudlandsdev 發起，屬公開 CTF，而非交易所或獎賞平台事故。獎池隨公眾加注升至約 0.02511679 BTC（約二千美元）。官網顯示挑戰運行約 19.28 小時後結束；勝出時間為 2026 年 10 月 25 日 15:47 UTC，即香港時間同日晚上 11 時 47 分，由公開帳號 （HN：killaonx）取勝。主辦其後確認，伺服器上原先放的是 wallet-branch 金鑰，而非注資地址本身的金鑰，經核實後才人工轉出獎池。挑戰地址 bc1qlnu50y4zm0nwxkckxu09thn5xdcz8aw6t3cxqy 其餘額其後歸零，鏈上轉出略晚於官網標示的勝出時刻，與「先核實再轉帳」相符。

Crypto HK 在此提醒各位用戶及合作夥伴，對外應用程式一旦踩中已知高危元件，修復窗口以小時計；可動用資金的密鑰不應與對外網站或 API 主機放在同一信任域。任何交易宜採離線簽署、託管或嚴格最小權限，並盡速套用官方修補。
參考資料：https://stealmybitcoin.com/ 、https://news.ycombinator.com/item?id=50224916 、https://mempool.space/address/bc1qlnu50y4zm0nwxkckxu09thn5xdcz8aw6

********************************************************************

Recent exposures of multiple severe network vulnerabilities have drawn significant attention, particularly a remote code ex*****on issue affecting a large number of PHP websites (commonly referred to by the community as PHP2Shell, with public identifiers including CVE-2026-109618 and CVE-2026-109619).

Amid heated discussions, some questioned whether the vulnerability was merely theoretical, leading to the setup of a public challenge website, stealmybitcoin.com. Key material related to Bitcoin was placed on an intentionally unpatched server, accompanied by an on-chain reward pool inviting the public to attempt to retrieve it.

This "Steal my Bitcoin" challenge was initiated by the Hacker News account cloudlandsdev as an open CTF, rather than an exchange or bounty platform incident. Public contributions pushed the reward pool to approximately 0.02511679 BTC (around $2,000 USD). According to the official website, the challenge ended after running for approximately 19.28 hours; the winning time was October 25, 2026, at 15:47 UTC (11:47 PM Hong Kong Time on the same day), won by the public account (HN: killaonx). The organizers subsequently confirmed that the server initially held a wallet-branch key rather than the key for the funded address itself, with the reward pool transferred out manually following verification. The remaining balance of the challenge address bc1qlnu50y4zm0nwxkckxu09thn5xdcz8aw6t3cxqy was subsequently reduced to zero, with the on-chain transfer occurring slightly later than the win time stated on the official site, consistent with the "verify first, then transfer" approach.

Crypto HK would like to remind all users and partners that once public-facing applications hit known high-risk components, the remediation window is measured in hours; cryptographic keys for accessible funds should not be placed in the same trust domain as public websites or API hosts. Any transaction should adopt offline signing, custody, or strict minimal privilege, and official patches should be applied as quickly as possible.

References: https://stealmybitcoin.com/ , https://news.ycombinator.com/item?id=50224916 , https://mempool.space/address/bc1qlnu50y4zm0nwxkckxu09thn5xdcz8aw6t3cxqy

14/10/2026

買冷錢包，當然要找最具信譽的代理

近日幣圈被Ledger冷錢包被盜事件震撼。事源Ledger的馬來西亞、印尼、菲律賓經銷商被揭發在硬件裝置植入惡意程式，盜取客戶的助記詞、私鑰。事件反映選用可靠供應商的重要性。
我們聲明，Crypto HK香港加密資產出售的Ledger設備一直以來都是從官方拿貨，未經任何拆裝、纂改，過去未曾發生出售的冷錢包被盜問題。
Crypto HK香港加密資產亦是除Ledger外，八個知名冷錢包品牌的指定經銷商，包括CoolWallet、Tangem、OneKey、SafePal、Ellipal、Coldlar、D’cent，更是Trezor的大中華區唯一代理，是存放加密資產的信心保證。冷錢包事關財產安全，當然只能選擇有信譽的代理。
最後，我們提醒客戶，如曾從東南亞其他地區購置冷錢包，即使未有被盜，仍應盡快轉移資產至其他冷錢包，免遭損失。

Choose Only Crypto HK when Purchasing Cold Wallet

The crypto community has recently been shaken by the Ledger incident. It was revealed that Ledger’s distributors in Malaysia, Indonesia, and the Philippines had implanted malware into the hardware devices to steal customers’ seed phrases and private keys. This incident highlights the importance of choosing a reliable supplier.
We hereby declare that all Ledger devices sold by Crypto HK have always been sourced directly from the official channel. They have never been disassembled or tampered with, and there has never been any case of cold wallets sold by us being compromised.
In addition to Ledger, Crypto HK is also the official reseller for eight well-known cold wallet brands, including CoolWallet, Tangem, OneKey, SafePal, Ellipal, Coldlar, D’cent, and we are also the only agent for Trezor in the Greater China region — a guarantee of confidence when storing crypto assets. Cold wallets involve the security of your assets, so you should only choose a reputable dealer.
Finally, we remind customers that if you have previously purchased a cold wallet from other regions in Southeast Asia, even if it has not yet been compromised, you should transfer your assets to another cold wallet as soon as possible to avoid potential losses.

08/10/2026

🌟CryptoHK 香港加密資產提供OneKey Pro 2 公開發售🌟
OneKey 新一代旗艦硬體錢包 Pro 2 現已登陸香港。

OneKey Pro 2 搭載 防篡改安全晶片，配備 3.5 吋彩色高清觸控螢幕、4 鏡頭離線掃碼（Air-Gapped）、指紋識別驗證、無線充電及 Bluetooth / USB-C 多種連接方式，為您的加密資產提供便捷的操作體驗與嚴密的安全防禦。

價錢：HKD$2,029

即日起優先現貨發售，數量有限，售完即止

Crypto HK 香港加密資產 — 指定官方代理
歡迎親臨各分店選購或預訂，率先體驗新一代安全標準硬體錢包。
WhatsApp 查詢 / 訂購：5308 6000
官方網站：https://chkhw.com

🌟OneKey Pro 2 Now Live at Crypto HK🌟
OneKey’s next-generation flagship hardware wallet, OneKey Pro 2, has officially arrived in Hong Kong.

OneKey Pro 2 features a tamper-resistant secure element, equipped with a 3.5-inch HD color touchscreen, 4-camera air-gapped QR scanning, fingerprint authentication, wireless charging, and flexible Bluetooth / USB-C connectivity—delivering a smooth user experience and robust protection for your crypto assets.

Price: HKD$2,029

In-stock sale starts today on a first-come, first-served basis while supplies last.

Crypto HK — Official Reseller
Visit our stores to purchase or order, and be the first to experience the next standard in hardware wallet security.
WhatsApp : 5308 6000
Official Website: https://chkhw.com

31/08/2026

【限時優惠】Ledger 熱門冷錢包 8 折大促銷！
Limited-Time Offer: 20% Off Popular Ledger Cold Wallets

想為你的加密資產提升安全防護？千萬不要錯過這次限時特惠！

優惠期： 2026年8月31日 – 2026年9月13日

精選優惠產品：
Ledger Nano X（全系列顏色）
原價：HKD 869 → 優惠價： HKD 695

Ledger Flex（全系列顏色，黑色除外）
原價：HKD 2,199 → 優惠價： HKD 1,759

優惠條款及細則：
- 本優惠僅適用於推廣期內終端客戶之購買。
- 單筆交易中，同一客戶最多限購 6 件相同產品。
- 退貨產品將不享有此推廣支援。

數量有限，欲購從速！歡迎聯絡我們WhatsApp 53086000 查詢詳情。

Want stronger protection for your crypto assets? Don’t miss this limited-time deal.

Promotion period: 31 August 2026 – 13 September 2026

Featured products
Ledger Nano X (all colours)

Original price: HKD 869 → Promo price: HKD 695
Ledger Flex (all colours except Black)

Original price: HKD 2,199 → Promo price: HKD 1,759

Terms & conditions
- Valid only for end-customer purchases during the promotion period.
- Maximum 6 units of the same product per customer per transaction.
- Returned items are not eligible for this promotional pricing.

Contact us on WhatsApp 5308 6000 for details.