Keystone 网站遭入侵致设备认证密钥泄露，将销毁 18,835 台旧密钥设备
Keystone Breach Exposed 25,964 Purchase Records and Compromised Device Verification Key Keystone said its latest investigation found that attackers obtained a WebAuth device-authentication key through the website breach, potentially allowing counterfeit hardware wallets to pass official authenticity checks. The company will destroy 18,835 unsold devices using the old key, pause unshipped orders and switch new production to a replacement key. The incident also affected 25,964 purchase records and 12,873 incomplete checkout records, while Keystone said seed phrases, private keys and transaction signing were not compromised.
Keystone 最新调查称，攻击者通过网站入侵获取了 WebAuth 设备认证密钥，可能使仿冒硬件钱包通过官方真伪校验。公司将销毁 18,835 台使用旧密钥的未售设备，暂停未发货订单，并将新生产切换至替换密钥。事件涉及 25,964 条购买记录和 12,873 条未完成结账记录，Keystone 表示助记词、私钥和交易签名未受影响。
来源：WuBlockchain · x.com