Keystone, the maker of cryptocurrency hardware wallets, says hackers stole a device verification key that helps its wallets prove they are genuine. With that key, attackers could potentially build counterfeit devices that pass an online authenticity check used by some owners.
The company also reports impact to buyer records, with one source citing 25,964 affected buyer records and another citing a higher number of wallets to be destroyed (18,835). Keystone says the incident did not involve recovery phrases or private keys, and focuses on the authenticity-verification risk rather than direct theft.
Across outlets, the main emphasis is on the stolen verification key and the potential for counterfeit wallets to trick customers. Coverage also varies in how much the initial disclosure about customer information is highlighted versus the later expanded disclosure about the key and the preventative steps, such as destroying devices.
