Lark Davis(@LarkDavis):🚨18,835 devices will be destroyed by Keystone. After an attacker stole their WebAuth key (used only to verify genuine devices), Keystone is scrapping every unit in inventory that carries the old key. The key is burned in at the factory and can’t be changed. It has nothing to do with seeds or signing, but with it an attacker could make fakes that pass Keystone’s own authenticity check. Production is switching to a new key. Unshipped orders are paused and moving to preorder until the new devices are ready.

2026.10.27 06:00

🚨18,835 devices will be destroyed by Keystone. After an attacker stole their WebAuth key (used only to verify genuine devices), Keystone is scrapping every unit in inventory that carries the old key. The key is burned in at the factory and can’t be changed. It has nothing to do with seeds or signing, but with it an attacker could make fakes that pass Keystone’s own authenticity check. Production is switching to a new key. Unshipped orders are paused and moving to preorder until the new devices are ready.

Keystone Hardware Wallet@KeystoneWallet

2026.10.26 14:02

Forward to community