DECRYPT · 2026-10-27 18:16 UTC

Bitcoin Wallet Maker Keystone Pulls Devices as Stolen Key Opens Door to Fakes

Keystone hardware wallet maker will destroy 18,835 unsold devices after attackers obtained the WebAuth key used to verify genuine hardware, and suspended all unshipped orders. Stolen key could allow criminals to create counterfeit wallets that pass Keystone's authentication checks, potentially leading to customer asset theft. Breach also exposed 25,964 customer records from 2024-2026 with names, addresses, and order details due to failed automated data deletion tool; company reduced retention period from 180 to 90 days.

Loading the story on Tree News…