OneKey wallet representative Yishi warned on October 30, 2026, that BlackRock’s iShares Bitcoin Trust (IBIT) could face theft if attackers compromised its transaction-signing systems. Yishi said attackers might manipulate approvals without stealing private keys. This was a warning about a possible attack, not a report of an IBIT breach.
IBIT holds roughly 815,000 BTC, worth about $63 billion, with Coinbase as its active bitcoin custodian. Yishi said a hypothetical $6 billion theft would erase about 9.5% of the fund’s assets. BlackRock does not separately insure IBIT’s bitcoin, according to the post; Coinbase’s $320 million in commercial crime insurance is shared across customers, and its agreement caps liability at $100 million per cold-storage address, subject to other conditions. Yishi said shareholders could bear losses if stolen bitcoin could not be recovered or compensation fell short.
