News Heat Trend
Project Overview
Keystone is a hardware wallet that achieves 100% physical isolation through QR code data transmission. It was designed from the ground up to maximize attack costs, minimize trust crises, prevent potential human error, avoid single points of failure, and improve operability. Currently, Keystone hardware wallet can interact with MetaMask Extension (browser plug-in) and MetaMask Mobile (mobile APP).
Keystone: Shortens Data Retention Period, Commits to Allowing Users to Request Immediate Deletion of Logistics Data
Odaily reports: Hardware wallet brand Keystone has issued an update on the handling progress of a previous security incident, stating that it has shortened the logistics data retention period from 180 days to 90 days, effective immediately. Users who wish to have their data deleted earlier may contact official customer service after their order is delivered to request immediate deletion.Keystone stated that it has sent email notifications to all affected users, suspended all shipments, and isolated affected devices at all partner warehouses, including Amazon warehouses. The team is currently responding to user inquiries through the X platform and customer service tickets, and continues to improve the security of the inquiry page for affected users.In addition, Keystone reminds users to be vigilant against phishing attacks, emphasizing that emails related to the incident are sent only through the official email address, and that the official team will never request mnemonic phrases via email, direct message, or phone call. It also advises users to remain cautious about messages requesting urgent action. The team stated that further measures will be announced in the coming days and apologized to affected users for this incident.
18,835 Hardware Wallets to Be Destroyed as Keystone Security Breach Exposes 25,964 Customer Records
Bitcoin News posted on X that hackers stole the authentication keys used to verify the authenticity of Keystone hardware wallets, prompting the company to destroy 18,835 devices. The security breach also exposed 25,964 customer records.
Keystone to destroy 18,835 hardware wallets and suspend shipments after attackers obtain device verification keys
Odaily reports: Bitcoin hardware wallet manufacturer Keystone has stated that attackers obtained the permanent factory keys used to verify device authenticity. The company will destroy 18,835 unsold devices in its inventory and suspend all unshipped orders on its official website. The incident was discovered on October 20. Devices delivered before October 20 are not affected, and mnemonic phrases and private keys were not involved.The incident also affected 25,964 buyer records from Keystone's Shopify online store, involving names, contact information, shipping addresses, and order information between 2024 and 2026. A total of 51,083 records were previously involved, and 25,119 pieces of personal information have been deleted; customers who purchased through channels such as Amazon are not affected.Keystone stated that some records were not deleted within the originally planned 180-day period. The company has shortened the data retention period to 90 days and on October 24 requested that Shopify delete overdue data, which is expected to be completed on November 3. Official website sales will switch to pre-orders until devices using the new keys are produced; the company has submitted reports to relevant authorities in the EU, the UK, and other regions. (Decrypt)
Keystone Factory Verification Key Stolen, Will Destroy 18,835 Inventory Wallets
Hardware wallet manufacturer Keystone's device verification keys were stolen, leading to suspended shipments, the destruction of 18,835 unsold devices, and the leak of 25,964 buyer records.
Keystone Confirms Security Incident: Approximately 26,000 Customer Records and Device Authentication Keys Leaked
According to a statement from Keystone Hardware Wallet (@KeystoneWallet), its official website was compromised on October 20 by attackers exploiting a vulnerability in third-party monitoring tools. Approximately 25,964 purchase records containing personal information, 12,873 unpaid checkout records, and device WebAuth authentication keys were accessed. Mnemonic phrases, private keys, and payment information remain unaffected. Keystone will destroy 18,835 devices containing the old keys in its inventory, suspend shipments from its official website, and transition to a pre-order system. The company also reminded users that there is no need to transfer their assets and warned them to remain vigilant against scams, including fraudulent "recall" campaigns.
Unauthorized Access to Keystone Official Website Leaks Customer Shipping Information and Order Details
Hardware wallet maker Keystone disclosed a security incident on its official website after a third party accessed some customers' names, contact information, shipping addresses, and order details. The company stated that the compromised data does not include bank card information, seed phrases, private keys, or wallet passwords, and advised users to remain vigilant against subsequent scams.
Related news
Keystone: Shortens Data Retention Period, Commits to Allowing Users to Request Immediate Deletion of Logistics Data
Odaily reports: Hardware wallet brand Keystone has issued an update on the handling progress of a previous security incident, stating that it has shortened the logistics data retention period from 180 days to 90 days, effective immediately. Users who wish to have their data deleted earlier may contact official customer service after their order is delivered to request immediate deletion.Keystone stated that it has sent email notifications to all affected users, suspended all shipments, and isolated affected devices at all partner warehouses, including Amazon warehouses. The team is currently responding to user inquiries through the X platform and customer service tickets, and continues to improve the security of the inquiry page for affected users.In addition, Keystone reminds users to be vigilant against phishing attacks, emphasizing that emails related to the incident are sent only through the official email address, and that the official team will never request mnemonic phrases via email, direct message, or phone call. It also advises users to remain cautious about messages requesting urgent action. The team stated that further measures will be announced in the coming days and apologized to affected users for this incident.
18,835 Hardware Wallets to Be Destroyed as Keystone Security Breach Exposes 25,964 Customer Records
Bitcoin News posted on X that hackers stole the authentication keys used to verify the authenticity of Keystone hardware wallets, prompting the company to destroy 18,835 devices. The security breach also exposed 25,964 customer records.
Keystone to destroy 18,835 hardware wallets and suspend shipments after attackers obtain device verification keys
Odaily reports: Bitcoin hardware wallet manufacturer Keystone has stated that attackers obtained the permanent factory keys used to verify device authenticity. The company will destroy 18,835 unsold devices in its inventory and suspend all unshipped orders on its official website. The incident was discovered on October 20. Devices delivered before October 20 are not affected, and mnemonic phrases and private keys were not involved.The incident also affected 25,964 buyer records from Keystone's Shopify online store, involving names, contact information, shipping addresses, and order information between 2024 and 2026. A total of 51,083 records were previously involved, and 25,119 pieces of personal information have been deleted; customers who purchased through channels such as Amazon are not affected.Keystone stated that some records were not deleted within the originally planned 180-day period. The company has shortened the data retention period to 90 days and on October 24 requested that Shopify delete overdue data, which is expected to be completed on November 3. Official website sales will switch to pre-orders until devices using the new keys are produced; the company has submitted reports to relevant authorities in the EU, the UK, and other regions. (Decrypt)
Keystone Factory Verification Key Stolen, Will Destroy 18,835 Inventory Wallets
Hardware wallet manufacturer Keystone's device verification keys were stolen, leading to suspended shipments, the destruction of 18,835 unsold devices, and the leak of 25,964 buyer records.
Keystone Confirms Security Incident: Approximately 26,000 Customer Records and Device Authentication Keys Leaked
According to a statement from Keystone Hardware Wallet (@KeystoneWallet), its official website was compromised on October 20 by attackers exploiting a vulnerability in third-party monitoring tools. Approximately 25,964 purchase records containing personal information, 12,873 unpaid checkout records, and device WebAuth authentication keys were accessed. Mnemonic phrases, private keys, and payment information remain unaffected. Keystone will destroy 18,835 devices containing the old keys in its inventory, suspend shipments from its official website, and transition to a pre-order system. The company also reminded users that there is no need to transfer their assets and warned them to remain vigilant against scams, including fraudulent "recall" campaigns.
Unauthorized Access to Keystone Official Website Leaks Customer Shipping Information and Order Details
Hardware wallet maker Keystone disclosed a security incident on its official website after a third party accessed some customers' names, contact information, shipping addresses, and order details. The company stated that the compromised data does not include bank card information, seed phrases, private keys, or wallet passwords, and advised users to remain vigilant against subsequent scams.