Keystone to Destroy 18,835 Wallets After Authentication Key Breach

Were Keystone wallet private keys or customer funds compromised?

Not according to Keystone. The company said recovery phrases, private keys and wallet credentials were not exposed, but the stolen authentication key could allow counterfeit devices to appear genuine and potentially put funds loaded onto them at risk.

Orbitrum Investor Impact

Why does the breach matter for Keystone's business?

Destroying 18,835 unsold devices creates an inventory loss and replacement manufacturing costs, while suspended shipments delay customer deliveries. The compromised verification system and exposed customer information also create risks to customer trust and future sales. Keystone has not disclosed the financial cost of the incident.

How many Keystone customer records were exposed?

Keystone identified 25,964 buyer records containing personal information from 2024 through 2026, including names, contact details, shipping addresses and order information. Another 12,873 incomplete checkout records contained potentially exposed personal details. Some buyer information had been retained beyond the company's stated 180 day deletion period because its automated deletion process failed.

Are existing Keystone hardware wallets still safe to use?

Keystone said devices delivered before October 20, 2026, remain safe if they pass authentication. Customers who received devices using the compromised key after that date should contact Keystone for additional verification before using them, because counterfeit devices could pass the existing check.

Can Keystone fix the stolen authentication key through a software update?

No. Keystone said the affected authentication key is embedded during manufacturing and cannot be erased or rewritten. The company must manufacture replacement devices with a new key rather than repair the affected inventory through software.

When will Keystone resume hardware wallet shipments?

Keystone plans to resume shipments with newly manufactured devices using a replacement authentication key. As of its October 26 announcement, shipments of outstanding website orders were suspended and new orders were being handled as preorders. Investors should watch the production restart, replacement inventory costs and progress on customer data remediation.