Keystone to Destroy 18,835 Wallets After Device-Authentication Key Theft

Owners who received a device after October 20, 2026 can no longer trust Keystone's own online check and must run additional authenticity verification, even on units that pass the portal test. Keystone is junking all 18,835 unsold wallets in its inventory rather than risk shipping units tied to the compromised key, and direct web orders are frozen until the key is replaced at the factory. New buyers wait longer; existing old-key holders carry the burden of proving their device is real.

A non-custodial wallet's whole appeal rests on the user controlling their keys, but the authenticity system guarding against counterfeits is centralized in a single factory-burned credential Keystone cannot revoke or rewrite remotely. That single point of failure now undercuts the device's core promise, even though Keystone says recovery phrases and private keys themselves were untouched. The separate finding that buyer data sat past the firm's own 180-day deletion policy, missed by an automated tool, adds a privacy lapse that has nothing to do with cryptography.

The outstanding question is how fast Keystone completes the factory-level reissue of the WebAuth key and resumes direct shipments, which remain paused as of the October 26 disclosure. Equally unresolved is what permanent verification process replaces online checks for the already-shipped old-key devices, since Keystone has only described extra scrutiny as an interim fix. How the company handles the 25,964 exposed buyer records, some retained beyond its stated policy, will also test its data-handling credibility.