Keystone to Destroy 18,835 Hardware Wallets After Hackers Steal Device Verification Key
AI-summarised brief · reviewed before publication
Keystone disclosed that an attacker accessed its website on October 20, stole the verification key used by its hardware wallets, and could produce counterfeit devices that pass online authenticity checks. The company will destroy 18,835 unsold wallets bearing the compromised key and issue new keys for all future units. Owners of devices received after October 20 should verify authenticity with Keystone support; earlier devices remain valid. The breach also exposed 25,964 customer shipping records, prompting Keystone to shorten data retention to 90 days and notify affected users.
💡 Why It Matters
- · The incident exposes a critical flaw in hardware wallet authentication, threatening user security without compromising private keys.
- · It underscores the need for robust supply‑chain safeguards in crypto hardware manufacturing.