Every recorded Keystone security incident, newest first, with severity, fix status and sources.
Buyers' names, addresses and order details are in attackers' hands, which invites targeted phishing. The stolen authentication key means the online authenticity check can no longer rule out counterfeits made with the old key.
Someone holding a Keystone 3 Pro on firmware older than 2.4.0, knowing its PIN and approving a USB connection on it could run code on its microcontroller; ANZEN says this led to the recovery phrase. Keystone reports no exploitation.
More entries do not mean a less secure brand: widely sold devices draw more published research and more targeted attacks, and some vendors disclose more than others.
WalletInsights. Hardware wallet security incident tracker. Last checked November 3, 2026. https://walletinsights.io/en/security-incidents/keystone/
Vendors, researchers and readers can send corrections or statements to security@walletinsights.io. We check them against the sources, update the entry and record the change in its log.