Executive summary
Most consumer crypto products still ask users to memorize twelve words…
This document covers product, architecture, security…
Product thesis
Why now
- Telegram Mini Apps run native-feeling UIs without app-store gatekeeping.
- Shamir-based custody has matured from research to production-grade libraries.
- Stablecoin volume has become structurally meaningful for merchant payments.
- Consumer fatigue with seed-phrase ceremonies opens the field for keyless wallets.
What ONE WALLET is
- A wallet — multi-chain, keyless, Telegram-native.
- A payment rail — QR invoices, stablecoin settlement, merchant webhooks.
- An ecosystem — $1 token utility, mini-app distribution, ecosystem rewards.
User experience
Onboarding
ONE WALLET launches as a Telegram Mini App. After a lightweight session and device check, the wallet is created in a few taps. Shamir shares are split between device, Telegram, Recovery Phrase, and an optional Email Shard that can be enabled after setup or later from Settings.
Daily actions
- Send — pick a recipient from Address book or paste an address.
- Pay — scan a merchant QR; ONE WALLET resolves chain, amount, and FX.
- Receive — share a chat-native deep link or QR.
- Swap — in-app stablecoin and major-asset swaps with route preview.
- Earn — rewards in $1 for active payment and referral behavior.
Technical architecture
Trust boundaries
- Edge services orchestrate signing requests and hold no share.
- Each holder stores only one Shamir share and cannot sign unilaterally.
- Settlement broadcasts only after a valid signature returns.
Security model
Shamir multi-share signing
Threat model
| Vector | Impact | Mitigation |
|---|---|---|
| Device theft | Loss of one share | Rotate the device share via the recovery share or Email Shard, plus a fresh Telegram-bound share. |
| Telegram account or session hijack | Access to the Telegram share only (one share) | The Telegram share alone cannot reconstruct the key or sign; an attacker still needs a 2nd share (device, recovery, or Email Shard). An attacker controlling both the Telegram account and email inbox can recover without the Recovery Phrase — the accepted trade-off for lower recovery friction. High-value transfers add re-auth + cooldown. |
| Coerced recovery attempt | User tricked or pressured into using the recovery share | Time-locked recovery window with multi-step confirmation — the delay surfaces alerts before any share is released. |
| Signing from a compromised device | Malware on the device attempts to combine two shares | Per-signature biometric re-auth, value caps, cooldowns, and anomaly checks raise attacker cost and surface intervention before high-value broadcasts. |
Data, Privacy & Continuity
ONE WALLET is operated by ONE COMPANY, 3F, KLTS Block C, No. 78 Jalan Gombak, Kuala Lumpur, Malaysia. It runs as a Telegram Mini App. The full statement of our practices is the ONE WALLET Privacy Policy, which governs where it differs from this document.
6.1 What we receive from Telegram
Telegram supplies a standard Mini App session payload. From it we use only the numeric Telegram user ID, the username where one is set, the display name and profile photo, and the interface language. We do not receive the phone number, contact list, chat contents or message history — Telegram does not disclose these to Mini Apps. We perform no KYC and collect no legal name, government ID, home address or banking information.
6.2 What is held server-side
| Data | Held | Purpose |
|---|---|---|
| Telegram user ID and username | Yes | Account identity, referrals, support |
| Public wallet addresses | Yes | Balances, reward crediting, payment routing |
| Mining, reward and referral records | Yes | Reward calculation, leaderboard, revenue share |
| Merchant payment records | Yes | Settlement and dispute handling |
| Device diagnostics and approximate region | Yes | Crash reporting, fraud and anti-abuse |
| Bound email address and Email Shard | Yes | Recovery, if the user enables it |
| Private key | No | Reconstructed on device only, then wiped |
| Recovery Phrase | No | Only a one-way hash, which cannot be reversed |
| PIN, password, biometrics | No | Handled locally by the device OS |
| Legal identity, KYC, bank or card data | No | Never collected |
ONE COMPANY holds at most one share of any user's key. It cannot move funds, cannot freeze an on-chain balance, and cannot restore a wallet on a user's behalf. It also cannot surrender a key to any authority, because it does not hold one.
6.3 On-chain data is permanent
Every transaction — sender, recipient, asset, amount — is recorded publicly and permanently on-chain. This is a property of the blockchain networks and lies outside our control. No request, including a deletion request, can remove it.
6.4 Retention and your rights
Operational and diagnostic records are kept only as long as the purpose that justified collecting them requires, then deleted or irreversibly anonymized. Reward and settlement records are kept at least two years as financial records. Users may request access, correction, deletion, restriction, objection and portability, and may complain to their data-protection authority — by emailing support@onewallet.store with the subject line "Privacy Request". We respond within 30 days. Two limits apply and we state them plainly: on-chain records cannot be erased by us, and financial, security and compliance records are retained where law requires. Cross-border transfers rely on the European Commission's Standard Contractual Clauses.
6.5 If the service ever stops
Balances are not entries in our database. They exist on-chain, controlled by keys derived from the user's own shares. Our backend supplies convenience — balances, mining accounting, merchant tooling, history — but is not a custodian and not a required participant in any transfer.
Every user can export their private key at any time from Settings → Security → Private Key, after biometric or PIN verification. The exported key imports into any compatible third-party wallet. It needs no approval from us and works whether or not our servers are reachable. Treat it exactly as carefully as a Recovery Phrase: whoever holds it controls the wallet.
Should ONE WALLET ever be discontinued, we will give 90 days' notice through our official channels and keep key export available throughout, so every user can move to a wallet of their choosing. What would end are the platform services — $1 mining, referral revenue share, the merchant network, the Mini App store, in-app history. On-chain assets, including $1 already in a user's wallet, are unaffected.
Token model & Tokenomics
Utility before allocation
| Utility | Demand driver | Status |
|---|---|---|
| Fee discount | Holding $1 reduces payment/swap fees. | Designed |
| User rewards | Earn $1 for payments and referrals. | Designed |
| Merchant incentives | $1 top-up lowers acceptance fees. | Designed |
| Ecosystem access | Unlock premium mini-apps. | Planned |
| Governance signal | Vote on rewards, fees. | Planned |
Tokenomics
$1 has a fixed maximum supply of 10,000,000 tokens on the TON blockchain, with no additional issuance. The supply is allocated across seven buckets as shown below.
| Field | Value |
|---|---|
| Token name | 1DOLLAR ($1) |
| Network | TON Blockchain |
| Total supply | 10,000,000 $1 |
| Issuance | No additional issuance — a scarce digital dollar |
| Bucket | Share | Quantity |
|---|---|---|
| Mining Pool | 25% | 2,500,000 |
| Ecosystem Fund | 10% | 1,000,000 |
| Staking | 13% | 1,300,000 |
| Team / Development | 17% | 1,700,000 |
| Liquidity / Exchange | 15% | 1,500,000 |
| Marketing / Partnerships | 10% | 1,000,000 |
| Presale | 10% | 1,000,000 |
| Total | 100% | 10,000,000 |
$1 contract address (TON)
AddressEQCV2rGE-rCcHaiOgrFuqBt98pcFCZEGm47Zs_3mILO-2hxe
0:95DAB184FAB09C1DA88E82B16EA81B7DF297050991069B8ED9B3FDE620B3BEDA
Always verify the contract address against this page or our official channels before interacting with any $1 token contract.
Vesting and release schedules are published as each bucket activates.
Growth model
- Referral loop — every active user can refer inside chat with one tap.
- Merchant loop — accepting ONE WALLET introduces customers to the wallet.
- Mini-app loop — partner mini-apps require a wallet, driving new sign-ups.
Business model
| Stream | Mechanism | Status |
|---|---|---|
| Swap fee | 0.8% on in-app token swaps. | Designed |
| Merchant fee | 1% of settled merchant transaction volume. | Designed |
| Mini-app revenue share | Take rate on premium mini-app transactions. | Planned |
| Merchant SaaS | Subscription for analytics, refunds, multi-store. | Planned |
Roadmap
| Phase | Deliverable | Status |
|---|---|---|
| Phase 1 — Core wallet | Multi-Share custody, TMA, multi-chain | Completed |
| Phase 2 — Payments rail | QR invoices, settlement webhooks | In progress |
| Phase 3 — $1 utility | Fee discount layer, reward engine | Planned |
| Phase 4 — Ecosystem | Mini-app store, partner program | Planned |
Team & governance
| Foundation name | ONE COMPANY |
|---|---|
| Corporate type | Foundation |
| Country | Malaysia |
| Registration authority | SSM, Companies Commission of Malaysia |
| Business address | 3F. KLTS Block C No78, Jalan Gombak, Kuala Lumpur |
| Business nature | A global digital platform business that integrates and provides digital wallet, fintech solutions, games, AI, travel, and information services based on blockchain technology. |
Business Objectives
- Research, education, and support for blockchain and Web3 ecosystem development.
- Build a global digital ecosystem connecting wallets, fintech, AI, games, travel, and information platforms.
- Develop, operate, distribute, and standardize blockchain-based digital platforms.
- Support healthy digital asset and token-based service use, with real-use ecosystems.
- Connect global users and companies through Web3 communities, memberships, and rewards.
- Support AI-based information services, automation, data platforms, and digital innovation.
- Support online games, digital content, NFT, and metaverse ecosystems.
- Activate travel, tourism, payment, and membership-connected digital platforms.
- Cooperate with companies, institutions, and organizations in blockchain, fintech, AI, games, and travel.
- Run seminars, conferences, education, promotion, publishing, and information services for digital platforms.
- Provide digital technology education and startup support for youth, startups, developers, creators, and participants.
- Support fundraising, sponsorship, cooperation, and projects for a global Web3 ecosystem.
- Provide public-interest research, development, consulting, and technical support for digital platforms.
- Support safety, transparency, user protection, and regulatory compliance systems for blockchain services.
Risks & mitigations
Custody compromise
Shamir reconstructs the key at signing time, creating a brief in-memory exposure window on the device; a flaw in share rotation, reconstruction, or key wipe could expose funds.
Planned mitigation…Platform dependency
Telegram is the runtime.
Mitigation: progressive web fallback.Regulatory shift
Rules vary by region.
Mitigation: legal counsel.Merchant adoption
Requires integration density.
Mitigation: anchor partners.Token utility drift
Utility decoupling dilutes demand.
Mitigation: activity-linked rewards.Localization quality
Weak translations damage trust.
Mitigation: native review pipeline.Appendix
Glossary
- Shamir's Secret Sharing (SSS)
- Shamir's Secret Sharing.
- Threshold scheme (Shamir-based)
- A K-of-N access structure; not a threshold signature scheme (TSS).
- TMA
- Telegram Mini App.
- Settlement webhook
- A signed HTTP callback.
- Recovery share
- An offline Shamir share.
References
- Telegram Mini Apps documentation — platform reference.
- Shamir's Secret Sharing & threshold cryptography literature — fundamentals.
- ONE WALLET homepage and product brief — companion materials.
Document control
v1.0 · May 2026 · Official Release