Another major incident has hit the hardware wallet world: In a security update on October 26, Keystone confirmed that after attackers breached its official website on October 20, they obtained the WebAuth key used to verify device authenticity. The company decided to destroy 18,835 units of uns shipped inventory rather than risk releasing devices with compromised keys. The breach also exposed 25,964 purchase records and the names, contact details, and shipping addresses from 12,873 incomplete orders. Fortunately, private keys and recovery phrases were untouched. Devices shipped before October 20 can still be used after verification; those shipped afterward require a second verification with the company. In the same week, Foundation was impersonated in a phishing campaign that sent more than 20,000 emails from a spoofed official domain. Companies that sell the idea that offline means safe keep getting caught out. When you receive a new device, always verify its authenticity first—don’t rush to transfer your coins. #硬件钱包 #CryptoSecurity