The authenticity check now needs an authenticity check.

Keystone said in its 26 October statement, reported by The Hacker News, that an attacker obtained its device-verification key and exposed 25,964 buyer records. It plans to destroy 18,835 unsold devices using that key. Keystone says recovery phrases and wallet private keys were not involved; the concern is counterfeit devices passing checks. Devices received after 20 October with the old key require confirmation from Keystone support before use.