By Isaac • October 27, 2026 11:10 pm •
Hardware-wallet maker Keystone says it will destroy 18,835 devices after an attacker obtained a key used to verify whether its products are genuine—a supply-chain failure that goes well beyond an ordinary customer-data leak.
The company says recovery phrases, private keys, wallet passwords and payment-card details were not exposed. That is the critical distinction for current owners.
The incident did not hand an attacker the keys to users’ cryptocurrency. It undermined an authenticity check designed to help buyers determine whether a device came from Keystone rather than a counterfeiter.
Keystone first disclosed that unauthorized access to its website exposed customer shipping information held through its Shopify store. In its initial public statement, the company said names, contact
Continue reading
Join the conversation!
Please share your thoughts about this article below. We value your opinions, and would love to see you add to the discussion!