Keystone Destroys Devices After Security Breach Exposes Buyer Data
Current overview (not historical)
Keystone confirmed that 25,964 buyer records were stolen from its Shopify store between 2024 and 2026 due to a hacker exploiting a website vulnerability to steal wallet verification keys. The breach caused automated deletion tools to fail, leaving personal data exposed. In response, Keystone plans to destroy 18,835 devices containing the compromised keys and has paused shipments of products using the affected keys. The incident deepens after initial reports detailed how hackers accessed the key meant to verify wallet authenticity, opening the door to fake devices.
Written with AI from the reporting · updated 10/27/2026
Expand the detailed fact route and sources
Story route
A station-by-station route from the first public evidence onward; every station carries its own evidence and uncertainty.
- 1Unclassified fact stationOct 27, 00:00recorded Oct 27, 10:31single sourcerevised
Keystone 确认 25,964 买家记录泄露
Read original source ↗ CointelegraphReplay this moment in the explorerEvidence & revisions · 1 source records
- Subject：
- keystone
- Action：
- 确认客户数据泄露并计划销毁受损设备
- Object：
- 25,964 买家记录
- Occurred (fact side)：
- Oct 27, 00:00
- Published (valid side)：
- Oct 27, 09:55
- First seen (known side)：
- Oct 27, 10:31
Fact stationSingle source · one-sided claimRevisedCopy may have been revised later; time replay is bounded. Layer labels group reading only, not causation between layers.
- 2Unclassified fact stationOct 27, 00:00recorded Oct 27, 19:42revised
Keystone销毁18835枚硬件钱包
Read original source ↗ CoinDeskReplay this moment in the explorerEvidence & revisions · 2 source records
- Subject：
- keystone
- Action：
- 销毁
- Object：
- 18835枚未售出的硬件钱包
- Occurred (fact side)：
- Oct 27, 00:00
- Published (valid side)：
- Oct 27, 19:13
- First seen (known side)：
- Oct 27, 19:42
- Published (valid side)：
- Oct 28, 02:16
- First seen (known side)：
- Oct 28, 02:32
Fact stationRevisedCopy may have been revised later; time replay is bounded. Layer labels group reading only, not causation between layers.
Uncertainty marks flag where to check the sources; they are not proven causation.
Report timeline
Explore every side through dated source reports.
- DecryptSource report revisedKeystone destroys 18,835 hardware wallets after attacker obtains factory key
Report first recorded Oct 28, 02:32
Hardware wallet maker Keystone will destroy 18,835 unsold devices and suspend shipping after an attacker obtained the permanent factory key used to verify device authenticity. The breach, detected October 20, also exposed 25,964 buyer records from Keystone's Shopify store. Keystone says recovery phrases and private keys were not compromised, but counterfeit devices passing verification checks could lead to asset theft.
Read original source ↗
- CoinDeskSource report revisedKeystone to destroy 18,835 hardware wallets after website breach exposes authenticity key
Report first recorded Oct 27, 19:42
Hardware wallet maker Keystone announced it will destroy 18,835 unsold devices after a website breach on Oct. 20 exposed a key that could allow counterfeit devices to pass authenticity checks. The breach also exposed 25,964 buyer records, some kept beyond Keystone's 180-day deletion policy due to an automated tool failure. The company suspended shipments while investigating the incident.
Read original source ↗ - CointelegraphRelated fact: single sourceSource report revisedKeystone confirms breach: Hackers stole key used to verify wallet authenticity, affecting 18,835 devices
Report first recorded Oct 27, 10:31
Hardware wallet maker Keystone disclosed that attackers who breached its website last week stole an authentication key used to verify device genuineness. The stolen key could allow production of counterfeit wallets that pass authenticity checks. Keystone plans to destroy 18,835 devices in inventory containing the compromised key and has suspended shipments of devices using it. The company says devices manufactured before Oct. 20 are safe, but those delivered after cannot be guaranteed authentic.
Read original source ↗
Event activity trend
- Latest comparable
- 3
- Comparable peak
- 17Oct 28, 14:00
- 24h change
- -80%
The chart compares consistently observed participants only. Hover or tap to inspect each hour; use arrow keys to move between observations.
Event discussion
Reader opinions are hosted on GitHub Discussions; posting requires a GitHub account. Comments are not verified facts.