KEYSTONE TO DESTROY 18,835 HARDWARE WALLETS AFTER HACKERS STEAL DEVICE VERIFICATION KEY

Summary from the TLDR InfoSec newsletter

Attackers exploited a third-party monitoring tool on Keystone's website, obtained a hardware-wallet verification key, and accessed 25,964 buyer records plus 12,873 unpaid checkout records. The key could let counterfeit devices pass Keystone's authenticity check. Recovery phrases and private keys were not exposed. Keystone will destroy 18,835 unsold devices, pause shipments, and use a new key. Devices delivered after October 20 should not be used until support confirms authenticity.