Hardware wallet maker Keystone revealed that a hacker who breached its website stole an authentication key that could be used to create counterfeit devices capable of passing authenticity checks. The intruder exploited a vulnerability in a third-party monitoring tool to obtain the key and customer information, exposing buyers to potential asset theft. Keystone plans to destroy 18,835 devices in its inventory containing the compromised key and has suspended shipments until it produces new devices with a new key. The company says devices manufactured and delivered before October 20 are safe, but it cannot guarantee the authenticity of devices delivered after that date. The leak also affected 25,964 buyer records retained between 2024 and 2026 and 12,873 abandoned checkout records.
Source: Read the original article
