Keystone, a maker of Bitcoin hardware wallets, has pulled devices after attackers obtained the factory key used to prove that its hardware wallets are genuine. According to the company, 25,964 buyer records were affected.
Keystone stated that recovery phrases and private keys were not involved in the incident. The stolen factory key serves as proof of authenticity for Keystone's hardware wallets, and its compromise opens the door to fakes.