Hardware Wallet Service Disrupted by Network Attack

On November 6th, hardware wallet provider Keystone issued an announcement confirming that its companion Nexus App was recently targeted by a network attack. The incident led to a temporary disruption of some services within the app, affecting the user experience for a portion of its customer base.

Scope of the Attack and Official Response

Following the attack, the Keystone team acted swiftly to bolster security measures on their servers. Based on the ongoing investigation, there is currently no evidence suggesting that any user funds or personal information were compromised as a result of this incident. While this finding alleviates immediate concerns, the event underscores the persistent security challenges within the crypto storage ecosystem.

Critical Security Update v1.3.7 Released

As a core countermeasure, Keystone has urgently rolled out version 1.3.7 of the Nexus App. This update focuses on comprehensive security enhancements designed to address potential vulnerabilities and prevent future attacks of a similar nature.

  • Android Users: The updated version is now live and available for download directly via the Google Play Store.
  • iOS Users: The new version has been submitted to the App Store and is currently awaiting review by Apple. Users are advised to watch for update notifications from the official store.

Keystone strongly emphasized in its announcement that users must verify the app developer as "Yanssie HK Limited" within the app store before updating or downloading, to avoid installing malicious counterfeit software.

Interim Solution for iOS Users

Acknowledging the time required for iOS app review, Keystone provided guidance for its hardware wallet users on Apple devices. As a temporary workaround until the official app update is released, users can utilize other third-party wallet applications that are officially supported by and compatible with Keystone hardware to perform necessary operations such as transaction signing.

This incident serves as another reminder of the ongoing security threats in the cryptocurrency storage space. Even for cold storage hardware wallets, the security of their companion software—the "hot" endpoint—remains a critical link in the chain. Maintaining apps at their latest versions and meticulously verifying developer information are fundamental habits for users to protect their assets.