Keystone Breach Exposed 25,964 Purchase Records and Compromised Device Verification Key

Rickler Feed (@rickler_feed), Oct 26, 2026, 15:07 UTC

Keystone Breach Exposed 25,964 Purchase Records and Compromised Device Verification Key Keystone said its latest investigation found that attackers obtained a WebAuth device-authentication key through the website breach, potentially allowing counterfeit hardware wallets to pass official authenticity checks. The company will destroy 18,835 unsold devices using the old key, pause unshipped orders and switch new production to a replacement key. The incident also affected 25,964 purchase records and 12,873 incomplete checkout records, while Keystone said seed phrases, private keys and transaction…

The excerpt is quoted from a public Telegram channel, which owns its text.

Read the original post on Telegram

News events that include this post

POPA Recon's research of this event

More posts from Rickler Feed · All channels

FixLane Live vulnerabilities with ready fix prompts