Keystone said Monday that it will destroy 18,835 unsold hardware wallets after attackers obtained the factory keys used to authenticate its devices. Keystone has paused all website orders that have not yet shipped. The security breach, discovered on October 20, also exposed 25,964 buyer records containing personal information from 2024 to 2026. The stolen keys could allow counterfeit wallets to pass verification checks, putting customers’ assets at risk of theft. Keystone said that seed phrases and private keys were not affected, and neither were devices delivered before October 20.