Keystone will destroy 18,835 unsold hardware wallets after an intruder stole the key that proves devices are genuine
A clear explainer of what a stolen 'authenticity' key can and can't do, and what owners should check.
Keystone, a maker of crypto hardware wallets, said on October 26 that an attacker who got into its website obtained the key its devices use to prove they are genuine, according to The Hacker News. With that key, someone could build counterfeit wallets that pass Keystone's online check; a buyer who trusted one could lose their crypto. Keystone says the key plays no part in recovery phrases, private keys or signing transactions, and it has not reported any counterfeits or thefts.
Because the key is burned into each device during manufacturing and can't be changed, Keystone will destroy 18,835 unsold units and give new devices a new key. Devices delivered before October 20 that pass the check can be used normally; owners of devices received after that should contact support before using them.
The attacker used a flaw in a third-party monitoring tool on Keystone's website and also took 25,964 buyer records (names, contact details, shipping addresses, orders) from 2024 to 2026 purchases.
-
Cryptocurrency wallet
After exploring Keystone to Destroy 18,835 Hardware Wallets After Hackers Steal Device Verification Key, what a hardware wallet does is explained in Cryptocurrency wallet.
Explains crypto wallets, including hardware devices that store the keys used to sign transactions.
Wikipedia · Wade · 5 min
0