Keystone breach deepens: Hackers stole key used to verify wallets as genuine

{"

Authentication Key Exploitation":"Keystone initially disclosed a leak of customer information but has since disclosed that hackers also stole a key used to verify the authenticity of its devices, widening the scope of an incident initially disclosed as a customer data leak. The stolen authentication key could allow attackers to produce counterfeit wallets that pass its authenticity checks, potentially resulting in asset theft.","

Historical Context":"This incident adds to a series of attacks targeting hardware wallet manufacturers this year. Earlier this month, Ledger asked resellers across Southeast Asia and Hong Kong to suspend sales following reports that devices sold in the region contained unauthorized implants capable of capturing recovery phrases. In late July, Coldcard manufacturer Coinkite issued a warning to users after attackers exploited a bug that caused its devices to generate wallet seeds with less entropy than intended, resulting in the theft of millions of dollars in crypto.","

Keystone's Response":"Keystone said the attacker exploited a vulnerability in a third-party monitoring tool used by its website to escalate privileges. The company plans to destroy 18,835 devices in its inventory that contain the compromised key and has suspended production shipments of all devices using it. Devices manufactured and delivered before the Oct. 20 incident should be considered safe and that their authenticity checks remain trustworthy. However, it could not guarantee the authenticity of devices delivered after that date and urged affected customers to contact its support team for additional verification."}