An intruder who breached Keystone's website on October 20, 2026, obtained a WebAuth key used during manufacturing to verify device authenticity, which cannot be erased or rewritten once burned into hardware

Thefts and exploits that drain funds from exchanges, protocols and bridges, with their post-mortems, laundering routes and recoveries.

Keystone disclosed on 26 October 2026 that its website breach exposed customer records and a device-authentication key. It will destroy 18,835 unsold devices using the old key and pause pending shipments; recovery phrases and wallet private keys were not exposed.