WORLDTECHKeystone Pulls Bitcoin Wallets After Factory Key Is Stolen
Keystone, a maker of bitcoin hardware wallets, has pulled devices from sale after attackers obtained the factory key that authenticates its products. The company says 25,964 buyer records were affected, according to a report by Decrypt AI.
What the stolen key allows
The factory key is the credential that lets a buyer confirm a Keystone device is genuine. With that credential in hand, attackers could in principle pass off counterfeit hardware as authentic.
The report attributes the concern to that possibility rather than to any confirmed sale of fake devices.
Scope of the buyer data exposure
Records for 25,964 buyers were affected by the breach, the company's figure as reported by Decrypt AI.
Keystone says the recovery phrases and private keys that control wallet funds were not involved, which limits the exposure to the buyer records and the authentication key.
Open questions
- Have any counterfeit Keystone devices been found in circulation?
- How did attackers obtain the factory key?