Hardware wallet maker Keystone said an unauthorized third party accessed customer shipping information through a website breach, including names, contact details, shipping addresses and order details, after it confirmed the incident on Friday following a review of API activity with Shopify. The company said it has blocked access, fixed the vulnerability, opened an investigation and is emailing affected customers, but did not disclose how many were impacted. Security researcher Taylor Monahan warned the leaked addresses could expose holders to physical attacks and kidnappings, and blockchain security firm CertiK recorded 52 verified wrench attacks worldwide in the first half of 2026, up 33% from the same period last year. Some customers said they received breach notices despite buying devices more than two years ago, raising questions about Keystone’s 2023 pledge to cut data retention to 180 days. Keystone had not responded to Cointelegraph’s questions by publication time.
Summary written by Upside AI from the original article. Read the source for full details.
Read the original on Cointelegraph ↗
Keywords
Open a keyword to see other news on the same topic.
Related tickers and likely impact
BTC/USDT
• NeutralBitcoin
Relevance: low
| Market | Crypto |
|---|---|
| Exchange | Binance |
| Sector | Layer 1 |
| Market cap | $1.6T |
| Close on 10/25/2026 | 80,154.09 |
| Change that session | -0.91% |
Impact is scored by AI from the headline and may be wrong. It is not investment advice.
Related news
- AI agents help rescue ETH’s Glamsterdam fork, ‘Steal My Bitcoin’ site: Hodler’s Digest
The second and final testnet for Ethereum’s Glamsterdam hard fork was cancelled after ChainSecurity found vulnerabilities in two gas-scaling proposals (EIP-8037/8038) that could have affected at least 13 DeFi contracts. Derek Chiang of Eth Labs said the flaw was found only a few minutes before midnight, forcing everyone to scramble, and the Hoodi dress rehearsal will not be rescheduled until the second-order effects are fully analysed. To speed up the review, researchers from Eth Labs and the Ethereum Foundation deployed AI agents that coordinated through a message board in a GitHub repo, and a second board now examines EIP-8198 (“Quick Slots”) for the proposed Hegota fork. Separately, the ‘Steal My Bitcoin’ site, which has not been patched against the PHP2Shell vulnerabilities, holds the key to a Bitcoin wallet worth around $2000 and had gone 25 hours without a successful hack at the time of writing.
- Initia halts blockchain after exploit reportedly drains over $2.6M
Initia suspended its layer-1 blockchain and rollups at 3:41 p.m. UTC on Friday after researchers reported an exploit that allowed unauthorized token minting and the drain of over $2.6 million in crypto assets. According to D2 Finance, the attacker minted 2 million AUSD without sufficient backing, then used cross-chain transfers to move about 1.4 million AUSD, 105 ETH and 1.08 million USDC to Ethereum. The stolen funds were consolidated into an Ethereum wallet holding roughly 1,135.5 ETH, worth $2.73 million, and D2 Finance attributed the attack to a flaw in a Move function. Initia has not confirmed the losses or cause, and its INIT token fell to about $0.115 before rebounding above $0.15, trading near $0.1496 at the time of writing, up roughly 14% over 24 hours.
- Bitcoin Core Rewrites Its Security Policy for a World Where AI Finds Bugs in One Prompt
Bitcoin Core has updated its security policy so that bugs that are easily discoverable will be patched quickly rather than kept under a long embargo. The project will backport fixes to all maintained releases, ship a new version as fast as possible, and publish an advisory, since large language models have greatly lowered the effort needed to find such flaws and a quiet patch would accomplish little. The change was proposed by Chaincode Labs developer Antoine Poinsot and merged on Thursday. The article links the shift to AI-driven bug discovery, noting that an AI-driven audit logged nearly 5,000 findings across hundreds of crypto projects in early August, and that developers have patched AI-surfaced bugs in Lightning implementations and hardware wallets, while one Bitcoin bridge shut down.
- Interpol Recovers $105M in African Cybercrime Sweep That Shut Illegal Crypto Mines
Interpol said police from 21 countries arrested 1,462 suspects and recovered more than $105 million in Operation Serengeti III, a cybercrime crackdown in Africa that ran from June 29 to August 31, 2026, targeting ransomware, online scams and business email compromise. The operation disrupted 10,909 malicious networks and identified 65,929 victims, with linked losses of more than $385 million. In Angola, investigators shut two illegal crypto mining centers, arresting nine people and seizing more than 2,000 mining devices and six illegal power transformation stations. In Nigeria, more than $2.4 million in suspected investment fraud proceeds was traced, much of it laundered through crypto transactions. Several investigations remain active.
- Bitcoin Core changes security rules as AI makes finding code bugs dangerously easy
Bitcoin Core has changed its security policy so that vulnerabilities an AI model could rediscover with a simple prompt will be quickly disclosed and patched, replacing embargoes that could last about a year. According to developer Antoine Poinsot, reports of easily rediscovered flaws rose as LLMs lowered the bar for finding certain bugs, though fixes may get less testing before reaching users. A volunteer group of 16 developers ran AI models across 390 bitcoin projects in about a day in late July, logging 4,962 findings, 85 of them critical. Separately, a Coldcard hardware-wallet firmware flaw dormant since 2021 let attackers drain 594 BTC in 25 minutes on July 30, with losses nearing $114 million across four sweeps.
- Ethereum Delays Glamsterdam Testnet Fork Over Gas Security Flaws
Ethereum developers postponed the planned Glamsterdam activation on the Hoodi test network after security firm ChainSecurity found that gas changes in the upgrade could let some smart contracts permanently record failed operations that were designed to be retryable. ChainSecurity said it has already found 13 real-world examples and is working with affected projects through responsible disclosure, while the Ethereum Foundation assesses how many contracts are exposed. The Hoodi upgrade had been due to go live on Monday, and no new date has been set. Glamsterdam has already activated on the Sepolia test network on October 6, producing blocks with a gas limit of nearly 200 million, more than three times mainnet's 60 million.
Related markets
Latest news
- Chip Stocks to Buy After Their Worst Day Since June
The PHLX Semiconductor Index fell 6.7% on Oct. 22, its worst day since June 23, after Lam Research reported record revenue of $8.22 billion but warned that clean-room space and parts shortages would limit chipmakers' ability to meet demand into 2027. Micron expects memory supply to stay tight in 2027 and 2028, yet its stock is down 29% from its June 25 record close. AMD and Marvell are each about 22% below their Oct. 6 closes. The author says all three are worth considering after the drop, with Micron the first to look at because its price seems to reflect a downturn its own outlook does not show. AMD and Marvell carry higher earnings multiples and need their plans to hold up, and a slowdown in AI spending could still hit all three hard.
- Will gold prices keep falling this week?
On the morning of Oct. 26, domestic gold prices kept falling with global prices, as SJC gold bars were quoted at 138.7–141.7 million VND per luong (buy–sell), down 300,000 VND from the weekend. World gold was quoted at $3,986 an ounce, down $7 from the previous morning. In Kitco News' weekly survey, 7 of 17 experts expected prices to fall this week, 4 expected a rise, and 6 saw a sideways move or no clear trend. The article says prices may keep falling in the short term, but buying could emerge once gold drops below $4,000 an ounce.
- Banks pledge to lead and unlock momentum for Southeast Vietnam
A conference titled “Banking sector supporting capital mobilization for Southeast region growth, 2026-2030,” organized by the State Bank of Vietnam with the HCMC People's Committee, saw 18 cooperation agreements aimed at adding resources for key projects in the region. HDBank and Vikki Digital Bank pledged 124,500 billion VND for four projects in HCMC and Dong Nai, excluding their co-financing of Metro lines 4–5, while VietinBank, Agribank, MB and Vietcombank also committed funds to transport, industrial and social housing projects. The SBV said 35 key projects nationwide need about 1.7 quadrillion VND in loans, including 15 in the Southeast needing about 757,000 billion VND, and it has mechanisms to exclude these loans from or add to banks' credit growth quotas. HDBank urged faster land clearance, legal completion and data sharing to shorten appraisal times, and it raised a 721 million USD social loan in 2026.
- Proposal to fine violators up to 3 billion VND, cut off electricity, water and internet
On the morning of Oct. 26, Minister of Public Security Lương Tam Quang submitted to the National Assembly the government's draft amended Law on Handling Administrative Violations, with 6 chapters and 128 articles, raising maximum fines to 1.5 billion VND for individuals and 3 billion VND for organizations. The draft also extends limitation periods to 1–3 years depending on the field, from 1–2 years under the current law, and adds enforcement measures such as suspending exit, sealing premises, cutting electricity and water supply, and suspending internet and telecom services. The minister stressed stricter conditions for these measures to protect rights and avoid affecting uninvolved individuals and organizations. The National Assembly's review committee agreed the law needs comprehensive revision but asked for further review of the extended periods by field and more fundamental remedies than higher fines, and said cutting off electricity, water and internet is aimed at halting violations rather than enforcing penalty decisions, so these provisions need adjustment.
- Gold steadies near 3-mth low as elevated oil prices weigh; Fed meet eyed
Gold held steady in Asian trade on Monday after falling more than 4% last week, at $3,995.42 an ounce. The metal slipped below $4,000 on Friday for the first time since mid-July, mainly due to an oil surge amid elevated Middle East conflict, with Brent up 6.2% last week to its highest weekly close since mid-2022. Higher energy costs could prolong inflation pressures and limit central banks' room to ease policy. Investors widely expect the Fed to keep rates unchanged at its Oct. 27–28 meeting, while CME FedWatch data showed about a 78% probability of a December rate hike. The 10-year US Treasury yield near 5% keeps pressure on non-yielding gold, and the PCE inflation report due Oct. 29 will be the next test for the inflation outlook.
- Hong Kong names Nasdaq-listed Solana Company a strategic enterprise
Hong Kong has named Nasdaq-listed Solana Company (HSDT) a strategic enterprise under the Office for Attracting Strategic Enterprises (OASES) program, making it the only blockchain infrastructure firm onboarded in 2026. The company said the designation gives it a single point of contact across government agencies and regulators, faster pathways to recruit overseas talent, and introductions to local institutional partners. Solana Company runs staking and validator infrastructure, advises financial institutions on blockchain adoption, and holds Solana (SOL) as part of its digital asset treasury strategy. It plans to set up validator operations in Hong Kong under Pacific Backbone, an initiative to build a low-latency blockchain network across Asia-Pacific.
Get the briefing on Telegram or Zalo
Join the Upside Telegram channel or Zalo group for the Vietnam stocks and gold briefing at 8:00 and 19:00 (Vietnam time) on trading days, plus a weekly wrap on Saturday morning.