Keystone will destroy 18,835 unsold hardware wallets and suspend shipments after a website breach on October 20 exposed a key that could let counterfeit devices pass authenticity checks. The breach exposed 25,964 buyer records from 2024 through 2026, including names, contact details, shipping addresses and order information, and 12,873 unpaid checkout records may also have been affected. Keystone said recovery phrases, private keys and wallet credentials were not exposed, but some records were kept past its 180-day deletion policy because an automated tool failed without the company detecting it. Devices delivered before October 20 remain safe if they pass authentication, and the firm plans to replace the authentication key, move website sales to preorders and cut customer data retention to 90 days.
Summary written by Upside AI from the original article. Read the source for full details.
Read the original on CoinDesk ↗
Keywords
cryptocrypto walletscybersecurity
Open a keyword to see other news on the same topic.
Related news
- Keystone says website breach exposed hardware wallet buyers’ addresses
Hardware wallet maker Keystone said an unauthorized third party accessed customer shipping information through a website breach, including names, contact details, shipping addresses and order details, after it confirmed the incident on Friday following a review of API activity with Shopify. The company said it has blocked access, fixed the vulnerability, opened an investigation and is emailing affected customers, but did not disclose how many were impacted. Security researcher Taylor Monahan warned the leaked addresses could expose holders to physical attacks and kidnappings, and blockchain security firm CertiK recorded 52 verified wrench attacks worldwide in the first half of 2026, up 33% from the same period last year. Some customers said they received breach notices despite buying devices more than two years ago, raising questions about Keystone’s 2023 pledge to cut data retention to 180 days. Keystone had not responded to Cointelegraph’s questions by publication time.
- Crypto liquidations jump to $1.57 billion as Binance hack sends bitcoin, ether lower
- EIP-7702 didn’t cause Binance hack, but may have amplified losses
Blockaid says compromised signing systems likely enabled Binance's $6.3 billion hack, the largest in crypto history, while the Ethereum EIP-7702 upgrade may have helped attackers bypass security checks by consolidating the theft into one sweep. Attackers could have stolen the funds without the upgrade, according to Blockaid's CEO Ido Ben-Natan, who suspects a compromised developer computer gave access to Binance's wallet-signing infrastructure. Binance confirmed the hack and pledged to cover all losses, first suspecting an engineer's laptop before uncovering more breach points, while CEO Richard Teng said investigators found no evidence that private keys leaked. EIP-7702, introduced in May 2025 with the Pectra upgrade, had drawn earlier security concerns over malicious delegations that drained wallets in May and September 2025. Ambire's Ivo Georgiev said the upgrade made little difference but warned that engineers might overlook revoking a malicious delegation after regaining control.
- Binance hacker's Bitcoin haul tops Coinbase's corporate treasury
The attackers behind the $6.3 billion Binance hack now hold 18,270 BTC, worth about $1.4 billion according to Bitquery, which exceeds the 18,071 BTC Coinbase reported as of late September (17,954 BTC for investment and 117 BTC for operations). They also hold 508,621 ETH, more than the 495,362 ETH that BitcoinTreasuries.net attributes to The Ether Machine. Bitquery said the attackers initially stole 200,630 ETH and accumulated the rest by swapping stolen stablecoins and other tokens. Binance confirmed the hack, said about $3 billion in stolen assets had been frozen, and pledged to cover all losses. TRM Labs attributed the attack to North Korea's TraderTraitor group.
- Trezor Warns CryptoBilis Buyers After Report of Hardware Implant in Safe 5
Trezor said it received a credible report of a hardware implant in a Safe 5 bought from reseller CryptoBilis in August 2026, though it has not yet examined the device. The reported implant reads the wallet backup from the screen and sends it over a mobile network, similar to Ledger's case, and the details have not been verified by Trezor. Trezor urged anyone who bought its wallets from CryptoBilis since March 2026 to move funds to a new wallet with a new recovery phrase, and said no buyer has reported a loss of funds. Trezor removed CryptoBilis as a reseller on October 9 and has inspected 4 devices bought from it without finding evidence of tampering.
- THORChain’s RUNE jumps 13% after Binance’s record $6.3B hack
RUNE rose more than 13% to $0.67 from a local low of $0.59 at 12:20 a.m. UTC, according to TradingView data, after Binance confirmed the $6.3 billion hack. Onchain investigator ZachXBT said funds stolen from Binance and Bitget's September hack passed through THORChain and were combined at the same Ethereum address, and that the Bitget attack was attributed to North Korea-linked TraderTraitor. TRM Labs and Chainalysis also linked the Binance hack to the group. North Korean hackers had previously used THORChain to launder funds from the $1.4 billion Bybit hack and the $388 million Bitget hack. THORChain rejected Bitget CEO Gracy Chen's call to block the attacker's addresses, saying it cannot block individual swaps, though node operators can pause trading across a blockchain or the network. Validator TCB threatened to leave unless the protocol stopped processing North Korea-linked funds.
Related markets
Latest news
- Here's Why Janus Henderson is Bullish On Meta Platforms, Inc. (META)
Janus Henderson has released its Q3 2026 investor letter for the Global Sustainable Equity Fund, reporting a 1.86% return for the quarter, in line with its benchmark and ahead of the 0.38% return of the IA Global peer group. Performance reflected a sharp rotation within the AI trade: companies seen as vulnerable to AI disruption recovered, while businesses tied to AI infrastructure, power, cooling and electrification came under pressure, and the fund's lack of energy holdings also weighed on relative results. The managers highlighted rising electricity demand from data centres, the potential of renewable energy and battery investments for energy security and decarbonisation, and the risks a strong El Niño could pose to agriculture and inflation. The fund remains focused on companies with pricing power, resilient operations and long-term structural growth amid geopolitical uncertainty, elevated energy prices and higher interest rates. The letter also discusses Meta Platforms, Inc. (NASDAQ:META), a company that operates social media platforms and develops AI products, digital advertising solutions, and virtual and augmented reality technologies.
- After Meta, Could These Be Wall Street’s Next Blockbuster Stock Splits?
The article suggests stock-split activity could spread on Wall Street as many companies benefit from AI and see their share prices soar, noting Meta Platforms just announced a 2-for-1 split alongside new non-voting shares that let it raise capital for AI without reducing CEO Mark Zuckerberg's voting power. Micron Technology and MercadoLibre are named as possible future candidates, though the author stresses that upcoming splits are hard to predict. Micron benefits from strong demand and a severe memory chip shortage, with revenue and net income at all-time highs; its shares trade around $983, and it last split in 2000. MercadoLibre faces short-term profit pressure from e-commerce competition in Latin America and its investments, with shares around $1,673 and no stock split to date. The author sees Micron's prospects as still bright and says MercadoLibre could rebound in the medium term as its investments pay off.
- 5 Most Profitable Stocks of the Past 5 Years
The article ranks the five most profitable US-listed stocks of the past five years by cumulative net income, using Yahoo Finance data, and notes their popularity among analysts and hedge funds per Insider Monkey's Q2 2026 database. AI is driving demand for chips, memory and cloud computing. Reuters reported that second-quarter 2026 S&P 500 earnings were on track to rise 52% year over year, with technology up 74%, versus 33% when investment-related gains were excluded. For Amazon, AWS generated $16.6 billion of the company's $27.5 billion operating income in Q2 2026, with segment sales up 37% to $42.2 billion and a contracted backlog of $496 billion. However, its reported net income included $53.4 billion of non-operating pretax income mainly tied to its Anthropic investment, and trailing 12-month free cash flow was negative $7.6 billion versus $18.2 billion a year earlier.
- The U.S. Labor Market Just Delivered Its Strongest Signal in 57 Years. But There's a Catch.
New initial jobless claims rose slightly to 194,000 in mid-October from 189,000 in mid-July, a level that remains historically low. Employers added only 29,000 jobs in September, pushing the 12-month rolling average to 45,000, so layoffs are rare but hiring is also weak. The 4.2% unemployment rate suggests full employment; the article points to AI investment making companies hesitant to add staff and tighter immigration policies encouraging them to keep current workers. With claims not trending higher, the author sees no sign of an imminent recession, and consumers still spend despite inflation well above 3%. Consumer discretionary stocks are down 3% year to date, and the author argues stocks have support while claims stay low, but a slowdown in earnings growth tied to the AI boom could cause a quick S&P 500 pullback.
- Will AI Answers Become as Winner-Take-All as Google? – Uneasy Money
Kain Warwick, Austin Griffith and Taylor Monahan of the Uneasy Money podcast argue AI answers may become winner-take-all like Google search, since companies cannot yet buy their way into model weights the way they buy an ad slot. Taylor Monahan cites AI models repeatedly directing users with bug bounty disputes to SEAL 911, even though it does not mediate bounties, and calls such AI SEO an easy monetization point.
- OpenAI pares fundraising goal, now seeking up to $20 billion in latest round
OpenAI is seeking up to $20 billion in a new funding round, down from an earlier target of up to $30 billion, according to CNBC; the round has not closed, so figures may change. The Financial Times reported the target was cut by $10 billion and that OpenAI would seek a post-money valuation of $1.25 trillion, with some investors reducing their allocations. Investors from the United Arab Emirates are leading the round alongside Coatue. The move follows a week in which investors questioned whether big tech's AI spending will deliver adequate returns, and AI-linked stocks fell, with Intel down 25% on weak revenue guidance, Micron down 5.5% and Nvidia down 4%. Microsoft, Alphabet and Amazon all issued capex figures or forecasts last week below analysts' estimates, and Alphabet had its worst trading day ever after search revenue fell short of expectations.
Get the briefing on Telegram or Zalo
Join the Upside Telegram channel or Zalo group for the Vietnam stocks and gold briefing at 8:00 and 19:00 (Vietnam time) on trading days, plus a weekly wrap on Saturday morning.