Hardware Wallet Security Breach: Keystone's Drastic Response to Key Compromise
The hardware wallet industry is facing a significant security development. Manufacturer Keystone has concluded its investigation, confirming that a vulnerability on its official website led to the exposure of critical device authentication keys (WebAuth Keys).
The Core Issue: Risks of Exposed Verification Keys
Attackers obtained the verification keys through the website flaw. These keys are central to the process that allows a device to pass official authenticity checks. In practical terms, this leak could potentially enable bad actors to produce counterfeit hardware wallets capable of passing Keystone's own verification system, posing a direct threat to user funds.
Immediate Action: Inventory Destruction and Shipping Halt
Confronted with this risk, Keystone implemented a series of decisive countermeasures:
- Mass Inventory Destruction: The company is destroying its entire stock of devices that still contain the old, compromised keys—a total of 18,835 units.
- Complete Shipping Suspension: All pending customer orders have been put on hold until a full resolution is in place.
- New Key System Deployment: All newly manufactured devices will now incorporate a fresh, secure set of authentication keys.
Data Impact and User Guidance
The incident also impacted user data security. Keystone acknowledged that approximately 25,964 purchase records containing personal information, along with 12,873 incomplete checkout records, were potentially exposed.
The company was quick to clarify a critical point: the core elements protecting user assets—seed phrases, private keys, and the transaction signing function—remained unaffected. These are stored offline within the user's device and never interact with online systems.
Users who received devices after October 20th are advised to contact official support for additional verification if their unit still relies on the old key system, ensuring no compromise has occurred.