An attacker gained access to Keystone's website and obtained the key used by its hardware wallets to prove authenticity, potentially allowing counterfeit devices to pass verification.
The vulnerability or weakness
The attacker exploited a vulnerability in a third-party data monitoring tool used by Keystone's website, enabling the escalation of privileges and access to customer data and the key.
Earlier attacks and coverage
- Leaked LiteLLM Master Key Let Attackers Steal GitHub Tokens and Hijack Release Pipeline (2026-10-24)
- Hackers Steal 1.8 Million Records From Nikkei (2026-10-20)
Business impact
Keystone must destroy unsold devices and issue new ones with a new key, impacting operations and potentially leading to increased costs. Customers might experience delays in receiving their devices.
Industries affected
Cryptocurrency and blockchain technology users are primarily affected.
Users affected
Owners of Keystone hardware wallets should be cautious, as counterfeit devices could lead to the theft of their cryptocurrency if trusted.
