webauth

18,835 new Keystone wallets are headed for destruction. Straight from the warehouse.

The reason: the WebAuth key was stolen. It’s embedded in the device at the factory, and can’t be erased or rewritten. With that key, a counterfeit will pass their online verification as genuine. So the entire warehouse stock is now in question.

Now add October 23: Keystone confirmed then that outsiders had obtained customers’ shipping details.

If the addresses and the key end up in the same hands, the “we sent you a replacement” scam is almost ready to go. Keystone itself warns: there’s no recall, and anyone asking you to hand your device back is a scammer.

What to do:
- If you received it by October 20 and it passes verification, keep using it; no need to move your funds
- If you received it later, contact support

I’m keeping a close eye on those who bought after October 20. Got a hardware wallet? Subscribe—I’ll follow this story through to the end.

#Keystone #HardwareWallet #WebAuth #CryptoSecurity #Scam