1. What Happened at Keystone
Hardware wallet maker Keystone said on Monday, October 26, that the intruder who breached its online store, first detected on October 20, also obtained the key the company uses to confirm that its devices are genuine. The company will destroy 18,835 units in inventory that carry the key, and it cannot fully rule out counterfeits among devices received since October 20.
The latest turn in the Keystone wallet breach turns what began as a customer-data incident into a question about the integrity of the hardware itself. This article walks through what was taken, why the authentication key matters, what owners are being told to do and how the episode fits a difficult year for wallet makers.
2. What Did the Attacker Take From Keystone?
The attacker took two categories of material. The first is customer information from Keystone's Shopify-based web store. The second, disclosed in Monday's update, is the device authentication key, called the WebAuth key.
According to the company, the intruder got in through a flaw in a third-party monitoring tool running on the store. Keystone has not named the tool. Through that foothold, the attacker reached 25,964 buyer records covering purchases made between 2024 and 2026. The records include names, contact details, shipping addresses and order details such as items and prices.
Keystone is also counting 12,873 unpaid checkout records as a precaution, meaning sessions in which a shopper began an order but never completed payment. Those entries can still hold the contact and address details a person typed into the form, so the company is treating them as potentially exposed.
Keystone states that seed phrases, private keys, bank payment details and government identification were not affected, and that its sales through Amazon were outside the incident. Those assurances come from the company itself; the earlier reporting on the breach relied on Keystone's own statements and on customer reports.
3. Why Does the WebAuth Key Matter?
The WebAuth key is a secret written into each Keystone device at the factory, and it cannot be changed afterward. Its job is narrow: it lets a buyer or an app check that a device was really made by Keystone. It plays no part in generating recovery seeds or signing transactions, so the theft does not give the attacker a way to move funds from an existing wallet.
The risk lies in counterfeiting. Hardware wallets are usually shipped by mail, and a buyer has to trust that the sealed box contains an untouched device. An authenticity check is one of the few ways to test that trust. If the signing secret behind the check is in the hands of someone else, a forged device could be built to pass it. A convincing fake is the scenario every hardware wallet buyer worries about, because the owner would be generating a seed phrase on a device someone else controls.
That is why Keystone describes the exposure as one that reaches beyond the 18,835 units it is scrapping. New devices will be produced with a fresh key. Until that batch is ready, the company has paused orders on its website and is taking preorders instead.
4. A Retention Promise That Did Not Hold
The breach also drew attention to a data-handling pledge. Keystone had advertised that it deletes shipping data within 180 days of an order. Over the weekend, customers reported that orders older than that were still among the exposed records.
Keystone confirmed the discrepancy. The company said some tasks in its automated erasure tool had failed and that it did not catch the failures in time. It is now shortening its retention period to 90 days.
The episode shows why the length of time a merchant keeps personal data matters. Shipping records for a product that stores digital wealth identify people who are likely to own cryptocurrency and tell an attacker where they live. A record that should have been erased months earlier is a record that can be used for phishing or targeting long after the buyer has stopped thinking about the purchase.
5. How Does Device Authentication Work on a Hardware Wallet?
A hardware wallet exists to keep private keys on a dedicated device that never exposes them to a connected computer or phone. Transactions are built on the connected machine, passed to the wallet, signed inside it and returned. Because the signing happens on the device, malware on the computer cannot lift the keys. The model works only if the device is what it claims to be.
Authenticity checks address that condition. In a typical scheme, the manufacturer places a secret in each unit during production. When the owner runs a check, the device proves it holds the secret without revealing it, and the companion app or website compares the result against what the maker expects. A genuine unit passes. A clone that lacks the secret fails.
The weakness of any such scheme is that its protection depends on the secrecy of the factory key. Once the key is outside the manufacturer, the check stops separating real devices from copies. That is the reason Keystone treats the theft as grounds to retire the key and the inventory that uses it, instead of relying on the existing check.
6. Why Is Leaked Order Data a Separate Problem?
Even without the key, the customer records create their own hazard. A shipping list for a hardware wallet maker is, in practice, a list of people who hold or intend to hold digital assets, paired with home addresses. Security researchers have long warned that such lists can feed phishing campaigns and, in the worst cases, physical targeting of owners.
The exposed fields, names, contact details, addresses, items and prices, are enough to write a message that looks credible. An email that cites a real order and a real price, and then asks the recipient to act on a supposed recall, is far more persuasive than a generic lure. This is the reason Keystone's own warning focuses on recall and migration requests.
The 12,873 unpaid checkout records add to the pool. A person who abandoned a purchase may not recall ever sharing details with the company, which makes a later message that mentions the store more surprising and more likely to be believed.
7. What Should Keystone Owners Do Now?
Keystone's guidance depends on when a device arrived. A unit delivered before October 20 that passes the authentication check is genuine, in the company's words. For a unit that carries the old key and was received after that date, Keystone says it cannot fully exclude a counterfeit, even if the device passes the check. Owners in that position are asked to contact support for additional verification before they use the device.
The company also warned about follow-on scams. It said it will never ask a customer to send a device back, so any request for a return or recall is fraudulent. Offers to migrate assets to a new wallet, or to "verify" a wallet on the owner's behalf, are likewise scams.
Customers whose names and addresses were exposed should expect targeted messages that mention a Keystone order. Anyone who receives an email, text or call about a recall, a migration or a verification should treat it as hostile and contact the company only through channels they reach on their own. A legitimate wallet maker has no reason to ask for a recovery phrase under any circumstances.
8. Where Does This Sit in a Hard Year for Wallet Makers?
Keystone is not the first hardware wallet company to face trouble this year. Trezor said a breach at its shipping partner ShipMonk exposed 80,689 customers, including data that ShipMonk had said was deleted. Ledger found LTE spy chips hidden in devices sold by one reseller, and onchain researchers linked them to a drain they estimate at $86 million.
On Sunday night, Foundation traced phishing emails that appeared to come from its official domains to compromised Cloudflare API keys.
A pattern runs through these cases. The secure chip inside a wallet, which is built to resist physical attack, has mostly been left alone. Attackers have instead gone after the systems around the chip: web stores, shipping vendors, resellers and cloud credentials. A device can be well engineered and still be undermined by the way it is sold, delivered or supported.
9. What Comes Next for Keystone Buyers?
Keystone has not given a date for when devices with the replacement key will ship. Orders on its website remain paused in favor of preorders until that batch is ready, and the company says it will destroy the affected inventory rather than sell it.
The case also leaves open questions that the company has not yet answered in public. It has not said how long the attacker had access before detection on October 20, how many of the 18,835 units had already been sold to customers, or how it will verify the units received after that date. Each of those answers will shape how much confidence buyers place in the replacement batch, and in the maker's process for guarding its signing secrets from now on.
Buyers weighing a purchase face the standard advice, which the incident reinforces: buy directly from the manufacturer, and enter a seed phrase only into a device you ordered yourself and set up yourself. Owners of existing Keystone devices who bought before October 20 do not need to replace them, provided the authentication check passes, but they should stay alert to messages that try to exploit the leaked order data.