TokenLabs.network
RT @dlt_green: A few days ago Keystone was actively marketing at Ledger’s expense and posted a video showing off their anti-tamper protection, framing themselves as the more secure option. They were also publicly highlighting and demonstrating the exact weaknesses in the system that many of us had already been criticizing.
Now their own website gets breached. The attacker obtained customer names, contact details and shipping addresses (~26k records) plus the WebAuth key used to verify whether a device is genuine. That key is permanently burned into the devices during manufacturing, so the risk of counterfeit units that pass the official authenticity check is real. They’re destroying almost 19k devices from inventory and pausing shipments as a result.
Seeds and private keys weren’t exposed, but leaking real customer data together with the authentication key is a very dangerous combination — and the timing after their recent anti-Ledger push makes it even worse.
Keystone Hardware Wallet @KeystoneWallet
02035
