Keystone stated that its latest investigation found attackers obtained WebAuth device authentication keys through a website vulnerability, which could potentially allow counterfeit hardware wallets to pass official authentication. The company will burn 18,835 unsold devices using the old key, pause unshipped orders, and switch new production to a replacement key. This incident also affected 25,964 purchase records and 12,873 incomplete checkout records, but Keystone claims seed phrases, private keys, and transaction signatures were not compromised.