Keystone breach deepens: Hackers stole key used to verify wallets as genuine

What happened

Keystone said an attacker who breached its website last week stole a key used to verify its devices are genuine. The hardware wallet maker warned this could let attackers make counterfeit wallets that pass authenticity checks and be sold to customers.

Confirmed

Global impact / market context

People buy hardware wallets to keep crypto safe offline. If fake devices pass authenticity checks, buyers may trust them and lose assets, which damages confidence in the brand and could push buyers toward rival makers or delay purchases.

Analyst inference

This adds to attacks on hardware wallet makers this year, including Ledger reseller warnings in Southeast Asia and Hong Kong and a Coinkite bug that caused crypto theft. Such incidents can raise scrutiny of device supply chains and seller checks.

Analyst inference

What to watch

1. Keystone said it will destroy more than 18,000 devices with the old key. Confirmed
2. Watch whether Keystone issues a replacement verification key or new authenticity checks, and how it tells customers to confirm devices they already own are genuine. Proposed
3. Track reseller and shipping channels for counterfeit Keystone wallets, since fake devices passing checks could reach buyers through sellers rather than direct orders. Analyst inference

Evidence

• cointelegraph.com