# Keystone Cannot Guarantee Authenticity of Wallets Delivered After Oct. 20 By Simon Yoon Canonical URL: https://www.tokenpost.com/news/technology/41827 Published: 2026-10-27T15:29:15.000Z Updated: 2026-10-27T15:29:15.000Z Section: Technology > A stolen device-verification key could let counterfeit wallets pass Keystone’s checks. The company urged customers with later deliveries to contact support. Keystone said it cannot guarantee the authenticity of hardware wallets delivered after Oct. 20, after an attacker accessed its website and took a key used to check whether its devices are genuine. The company said the key could allow counterfeit wallets to pass its authenticity check and reach customers as genuine products, putting buyers’ assets at risk. Customers with devices delivered after Oct. 20 should contact Keystone support for additional verification. Keystone considers wallets that were both manufactured and delivered before the incident safe and says their authenticity checks remain reliable. The attacker gained higher-level access by exploiting a flaw in a third-party monitoring tool used on Keystone’s website, the company said. It plans to destroy 18,835 inventory devices containing the compromised key and has suspended production shipments of devices using it. Shipments are expected to resume once production begins with a replacement key. The breach may also have resulted in the theft of 25,964 buyer records, a subject covered in TokenPost’s [earlier report on Keystone’s customer records](). ## Links in this article - [earlier report on Keystone’s customer records](https://www.tokenpost.com/news/technology/41300)