Bitcoin hardware wallet maker Keystone announced it will destroy 18,835 unsold devices and suspend shipping of all unshipped orders after attackers obtained the factory key used to verify its hardware’s authenticity. This key could allow counterfeit wallets to pass authentication checks, posing a risk of asset theft for unsuspecting buyers. The incident also affected 25,964 buyer records from its Shopify store, exposing names, contact details, shipping addresses, and order information. Keystone stated that recovery phrases and private keys were not involved, and has reported the incident to authorities in the EU, UK, and other jurisdictions.