Home › Podcast › Keystone Destroys 18,835 Unsold Hardware Wallets
Keystone Destroys 18,835 Unsold Hardware Wallets
This episode is based on Chain Pursuit's own research and on reporting cited in the sources below. The narration uses a synthetic voice.
After a stolen factory key, hardware-wallet maker Keystone is destroying 18,835 unsold devices so counterfeits cannot pass as genuine. This episode explains what was actually taken, why unsold stock is being scrapped rather than shipped, what it means for existing owners, and the fake-recall and asset-migration scams that Keystone itself warned about, as of early November 2026.
Prefer audio? Listen here or in your podcast app.
Listen on: YouTube
Key takeaways
- What was taken was not anyone's crypto. Keystone said an attacker obtained its WebAuth key, the permanent factory key that lets a device prove it is genuine. According to Keystone, recovery phrases, private keys, and wallet credentials were not exposed.
- The key is why unsold stock is being scrapped. Because the stolen key could let counterfeit devices pass Keystone's own authenticity check, Keystone said it is destroying 18,835 unsold wallets and pausing shipments, so a fake cannot reach a buyer looking genuine.
- Devices delivered before 20 October 2026 are unaffected and safe to use if they pass authentication, per Keystone. Units received after that date using the old key should be checked further before use.
- The breach also exposed buyer records, reported as 25,964 orders from 2024 to 2026 with names, contact details, shipping addresses, and order information. That data does not touch your coins, but it fuels targeted phishing, and it raises physical risk because home addresses were included.
- The real danger now is the scam wave. Keystone said it will not ask you to return your device. Treat any recall, asset migration, wallet verification, or investigation-assistance message as a scam, however official it looks.
- The durable lesson outlives this incident: buy a hardware wallet only from the maker or an authorized seller, verify it through the maker's official authenticity check, set it up yourself from a new recovery phrase, and never act on an unsolicited message about your wallet.
Questions
Was my crypto stolen in the Keystone breach?
No. Keystone said what was taken was its WebAuth key, the factory key used to verify a device is genuine, and that recovery phrases, private keys, and wallet credentials were not exposed. No loss of customer funds was reported. The risk is counterfeit devices and follow-on phishing, not a direct theft of your coins.
I already own a Keystone wallet. Is it still safe to use?
Keystone said devices delivered before 20 October 2026 are unaffected and safe to use if they pass authentication. If you received a device after that date that used the old key, Keystone advised seeking further checks before using it. Your recovery phrase and private keys were not part of the breach.
Why is Keystone destroying 18,835 unsold wallets instead of selling them?
Because the stolen key could let a counterfeit device pass Keystone's online authenticity check and appear genuine. Destroying unsold stock and pausing shipments removes the chance that a fake, or a unit tied to the compromised key, reaches a buyer who would trust it. Keystone said it will produce new devices with a replaced key.
I got an email about a Keystone recall asking me to return my device. Is it real?
Treat it as a scam. Keystone said it will not ask you to return your device. Any message about a recall, asset migration, wallet verification, or investigation assistance that asks you to ship your device, connect a wallet, or share your recovery phrase is the follow-on scam, not the company.
My name and home address were in the breach. What is the risk?
That data cannot move your crypto, but it makes phishing more convincing because a message can address you correctly, and exposed home addresses raise the risk of in-person pressure. Watch for targeted messages, never act on an unsolicited one, and never share your recovery phrase with anyone for any reason.
How do I make sure a hardware wallet is genuine before I trust it?
Buy only from the manufacturer or an authorized seller, never a marketplace reseller or a gift. Verify authenticity through the maker's official check, inspect for tampering, and set the device up yourself, generating a brand new recovery phrase on the device rather than using any phrase that came with it. A wallet that arrives preconfigured or with a supplied phrase is a scam.
Sources
- Crypto wallet maker Keystone to destroy almost 19,000 devices after security breach
- Bitcoin wallet maker Keystone pulls devices as stolen key opens door to fakes
- Hardware wallet scams: counterfeit, tampered, and preconfigured devices
- What to do when a data breach exposes your email
Related reading
If you have been affected: where to report a crypto scam, and our evidence checklist.