According to ChainCatcher, the official Chinese version of OneKey posted on social media that DEXX may have uploaded the user's clipboard content.

It received feedback that the app has repeatedly requested permission to "upload user clipboard content." If the user has copied the private key mnemonic on the phone, it may be necessary to transfer the assets as soon as possible.