Keystone to Destroy 18,835 Hardware Wallets After Auth Key Theft
Hardware wallet maker Keystone disclosed that attackers stole a device authentication key and compromised personal data for 25,964 customers, prompting the company to destroy 18,835 units and suspend shipments. Devices manufactured before October 20 require additional verification even if they pass Keystone's online checks.
Written by CoinArticle’s AI Newsroom · from 2 cited sources. How we work
The Breach and Scope
Keystone confirmed on October 26 that attackers obtained a device authentication key used to verify hardware wallet legitimacy, along with personal information belonging to 25,964 customers. In response, the company announced plans to destroy 18,835 hardware wallets already in circulation and halted new shipments, according to the company's security announcement.
The theft compromises the authentication mechanism that distinguishes genuine Keystone devices from counterfeits. Customers who received devices after October 20 are not affected by the destruction order, but those with older units face uncertainty about device authenticity even if the wallet passes Keystone's online verification tool.
What Customers Must Do
Keystone is requiring owners of pre-October 20 devices to undergo additional authenticity checks beyond the company's standard online verification process. The specific remediation steps—whether replacement, full refund, or alternative verification methods—were not detailed in the available disclosure. The company's suspension of shipments adds uncertainty for customers seeking replacements or new purchases.
Why It Matters
For Traders
Owners of affected Keystone devices should treat stored funds as potentially exposed and consider moving assets to verified alternative custody until replacement or refund is secured.
For Investors
The breach exposes hardware wallet supply chain risk; customers may lose confidence in Keystone's security model and shift to competitors, pressuring the company's market position.
For Builders
Protocols and wallet integrations relying on Keystone device attestation should review trust assumptions and consider how compromised authentication keys affect downstream verification in their custody flows.
This article is for information only and is not financial advice. Read the full disclaimer.
