Incident record · Under review Unattributed: Credential compromise Attackers obtained the factory key that proves Keystone's hardware wallets are genuine, and 25,964 buyer records were affected. The company says recovery phrases and private keys were not involved.
Status Under review
Reported loss Unavailable
Chain Multi-chain
Confidence 55%
Evidence boundary Confidence describes the coverage of the available evidence. It is not a safety rating and does not guarantee that a protocol or asset is safe.
Sources Record history First seen: 2026-10-27T18:16:02.000Z. Last updated: 2026-10-27T20:01:33.685Z. Revision: 1.
Related incident records Unattributed: Credential compromise Trezor cited July’s Coldcard attacks, in which strong passphrases helped protect some users whose wallet recovery information was compromised.
A secure wallet: Credential compromise Ledger’s confirmed implant findings and Trezor’s subsequent warning concern devices bought through the same reseller. The investigations put the route from manufacturer to customer alongside the security of the chip inside the wallet. Trezor has warned customers about a suspected…
Trezor: Security incident Trezor expands wallet passphrases to 128 characters after Coldcard thefts exposed weak recovery phrases, while warning users about passphrase risks.
OneKey founder: Security incident North Korean hackers could target BlackRock's $62 billion Bitcoin exchange-traded fund (ETF), crypto wallet maker OneKey founder Yishi Wang warned. “I suspect IBIT is already on North Korea's shortlist,” Wang said, following the $6 billion Binance hack that US authorities attributed to North Korea's TraderTraitor operation. The warning puts fresh attention on Coinbase, which serves… Read the full story on CryptoSlate Understand the crypto stories that matter and what to watch next. Get The Catalyst in your inbox
Unattributed: Credential compromise TL;DR Rising cybersecurity threats are reinforcing the case for stronger digital asset protection, with AI-assisted tools making vulnerability discovery faster and attacks potentially easier to execute. Bitcoin self-custody gives users direct control over their private keys, reducing reliance on centralized platforms while placing greater responsibility on individual holders. Hardware wallets, multifactor authentication, unique passwords, and ... Read more
Open the full incident tracker →