Keystone announced on October 26 that an attacker accessed its website and acquired the key utilized by its hardware wallets for authenticity verification.
Possession of this key enables an individual to manufacture fraudulent devices capable of passing the online validation process employed by Keystone users.
Should a purchaser accept a counterfeit unit, there is a risk that their cryptocurrency holdings could be compromised.
Keystone confirmed that the security incident did not involve any actual theft of funds.
The compromise specifically relates to the device verification key.
This development highlights vulnerabilities in the digital supply chain for critical hardware infrastructure.
Market participants and institutions must now reassess the integrity protocols surrounding third-party device authentication mechanisms.
