Keystone 调查：网站泄露致设备认证密钥被获取，将销毁 18,835 台旧密钥设备
R to @WuBlockchain: Keystone said its latest investigation found that attackers obtained a WebAuth device-authentication key through the website breach, potentially allowing counterfeit hardware wallets to pass official authenticity checks. The company will destroy 18,835 unsold devices using the old key, pause unshipped orders and switch new production to a replacement key. The incident also affected 25,964 purchase records and 12,873 incomplete checkout records, while Keystone said seed phrases, private keys and transaction signing were not compromised.
Keystone 最新调查称，攻击者通过网站泄露获取了 WebAuth 设备认证密钥，可能使伪造硬件钱包通过官方真伪校验。公司将销毁 18,835 台使用旧密钥的未售设备，暂停未发货订单，并将新生产切换至替代密钥。事件还涉及 25,964 条购买记录和 12,873 条未完成结账记录，Keystone 表示助记词、私钥和交易签名未受影响。
来源：WuBlockchain · x.com