WuBlockchain
Attackers obtained a WebAuth device-authentication key in a breach of Keystone's website, potentially allowing counterfeit hardware wallets to pass official authenticity checks. The incident exposed 25,964 purchase records and 12,873 incomplete checkout records.
Why it matters
The compromised key affects the trust layer around device verification, not transaction signing. Keystone said seed phrases, private keys and transaction signing were not compromised, limiting the incident's direct impact on users' stored assets.
Market impact
Keystone will destroy 18,835 unsold devices that use the old key, pause unshipped orders and move new production to a replacement key. The response puts device-authentication controls and supply-chain integrity at the center of hardware-wallet security concerns.
Frequently asked questions
-
What did attackers obtain in the Keystone breach?
Attackers obtained a WebAuth device-authentication key through Keystone's website breach. The key could potentially allow counterfeit hardware wallets to pass official authenticity checks.
-
How many records were affected by the incident?
The incident affected 25,964 purchase records and 12,873 incomplete checkout records.
-
What is Keystone doing with devices using the old key?
Keystone will destroy 18,835 unsold devices using the old authentication key. It will also pause unshipped orders and switch new production to a replacement key.
-
Were Keystone users' seed phrases or private keys compromised?
Keystone said seed phrases, private keys and transaction signing were not compromised in the incident.
-
Why does the compromised key create counterfeit-wallet risk?
The key is used for device authentication. Its compromise could potentially allow counterfeit hardware wallets to pass Keystone's official authenticity checks.
CryptoSlate
CoinDesk
TheBlock
Lookonchain