TREE NEWS update: Bitcoin hardware wallet maker Keystone will destroy 18,835 unsold devices and suspend all unshipped orders on its website after attackers obtained the permanent factory key used to verify device authenticity. The breach was discovered on Oct. 20; devices delivered before that date are unaffected and mnemonic phrases and private keys were not involved. Keystone said 25,964 buyer records from its Shopify store were also exposed, and it has reported the incident to authorities in the EU, UK and elsewhere.
Keystone to Destroy 18,835 Hardware Wallets After Verification Key Breach
The permanent factory key is the root of trust for verifying device authenticity, so its compromise undermines the attestation model itself, not just individual units — hence destroying unsold inventory rather than reissuing firmware. This matters most for buyers awaiting shipments and for Keystone's retail credibility, while existing holders are told their keys and phrases were untouched. The open question is whether the exposed buyer records and the loss of a verifiable supply chain push customers toward competing wallet makers, and how regulators in the notified jurisdictions respond.
Generated by AI for reference only.
Share on WeChat
Open WeChat → Scan → then tap "…" to send to a chat or Moments.
Tap "…" in the top-right corner to send to a chat or share to Moments.