Skip to main content
Back to news
SafetyHigh impact — Significance is rated automatically and is not a price signal.

Keystone Pulls Hardware Wallets After Signing Key Theft Enables Counterfeit Risk

(3 hours ago) · 1 source · Summarized by CryptoBipto

Hardware wallet maker Keystone has withdrawn devices from sale after discovering that a cryptographic signing key was stolen. The stolen key could potentially allow attackers to produce counterfeit firmware that devices would accept as genuine, prompting the company to destroy affected inventory.

WHY IT MATTERS

A hardware wallet is a physical device, similar to a USB drive, that stores the secret codes (called private keys) needed to access your cryptocurrency. Think of it like a safe for your digital money. These devices use something called a signing key to verify that any software updates they receive are real and not fake. It works like a wax seal on a letter — if the seal matches, you know the letter is authentic. In this case, someone stole that wax seal, meaning they could potentially create fake updates that the device would trust. This is concerning because the whole point of a hardware wallet is to be the most secure option for storing crypto. Keystone chose to pull and destroy the affected devices rather than risk customers using compromised hardware.

Keystone, a manufacturer of hardware cryptocurrency wallets, announced that it has pulled its devices from distribution after a signing key used to authenticate firmware updates was compromised.

Read the full analysis with a CryptoBipto membership

Members can read the full analysis of every story, not just the headline.

Get started

SOURCES

  • decrypt.co

RELATED

BTCHardware WalletsFirmware SecuritySupply Chain SecurityCryptographic Keys