Cyb3rius
@cyb3rius
· Oct 27
Did hackers steal Keystone's wallet verification key?Yes. An attacker who compromised Keystone's website obtained the device verification key its hardware wallets use to prove they are genuine, and the company now plans to destroy 18,835 affected units.What happened: Keystone disclosed in an October 26 statement that someone with access to its website walked off with the verification key used by its hardware wallets to attest authenticity. Rather than ship devices it can no longer validate, the company said it will destroy 18,835 wallets. No theft of user funds has been reported in connection with the incident.Key numbers: 18,835 hardware wallets slated for destruction1 device verification key exposed through the website compromiseDisclosed October 26 in a company statementWhy it matters: Hardware wallets sell trust in a supply chain, and a leaked attestation key lets counterfeit or tampered devices pass the exact check users are told to rely on. Verification is only as strong as the server that hands out the proof.Bottom line: A hardware wallet is only genuine if the key that proves it never leaves the vendor's hands.
0