Keystone Destroys 18,835 Wallets After Device Verification Key Stolen

Tue, 27 Oct 2026 16:34:51 +0000

Engineer — Learn: The attacker’s theft of a device-attestation signing key to enable undetectable counterfeits is a concrete illustration of supply-chain trust failure at the hardware level; no action required for enterprise stacks, but relevant when designing attestation or signing-key custody for your own CI/CD or hardware provisioning flows.
SOC/IR — Skip
Leader — Skip

Key-Compromise on CuraSec