Pinned Tweet
We owe you an apology.
On October 20, we detected unauthorized access to our official website. After verifying API activity with Shopify, we confirmed on October 23 that a third party obtained customer shipping information. You trusted us with those details, and we're sorry we didn't keep them safe.
Exposed: names, contact details, shipping addresses, and order details (items and prices).
Not exposed: payment card or bank details, recovery phrases, private keys, or wallet passwords.
We've blocked access, fixed the vulnerability, opened an investigation, and are emailing affected customers.
Scammers may pose as Keystone by phone, text, email, or mail, offering refunds, replacement devices, or "fixes" for your order or address. None of it is from us.
NEVER share your recovery phrase or private keys, and NEVER enter your recovery phrase into a device you didn't order. We will never ask for them. Don't click links in unexpected messages. Type keyst.one yourself.
A detailed report is coming soon.
Until then, trust only our official channels. If anything feels off, email support@keyst.one. We'd rather hear from you than have you take a chance.
Again, we're truly sorry to everyone affected.
On October 20, we detected unauthorized access to our official website. After verifying API activity with Shopify, we confirmed on October 23 that a third party obtained customer shipping information. You trusted us with those details, and we're sorry we didn't keep them safe.
Exposed: names, contact details, shipping addresses, and order details (items and prices).
Not exposed: payment card or bank details, recovery phrases, private keys, or wallet passwords.
We've blocked access, fixed the vulnerability, opened an investigation, and are emailing affected customers.
Scammers may pose as Keystone by phone, text, email, or mail, offering refunds, replacement devices, or "fixes" for your order or address. None of it is from us.
NEVER share your recovery phrase or private keys, and NEVER enter your recovery phrase into a device you didn't order. We will never ask for them. Don't click links in unexpected messages. Type keyst.one yourself.
A detailed report is coming soon.
Until then, trust only our official channels. If anything feels off, email support@keyst.one. We'd rather hear from you than have you take a chance.
Again, we're truly sorry to everyone affected.
199
228
886
368,113
Most people think linking a hardware wallet to a software wallet exposes your keys 🤔
It doesn’t.
Keystone shows a QR code of your xPub, a one-way derivation of your private key.
Nexus scans it & derives your addresses locally.
Your keys never go online. That’s air-gapped 🧊
It doesn’t.
Keystone shows a QR code of your xPub, a one-way derivation of your private key.
Nexus scans it & derives your addresses locally.
Your keys never go online. That’s air-gapped 🧊
8
3
41
4,804
Side effects of using a Keystone hardware wallet with the Nexus app 👀
🥶 Your keys stay cold
🛡️ Hackers stay away
🔍 What you see is what you sign
☮️ Life gets a lot less stressful
Anyone else experiencing these? 😉
🥶 Your keys stay cold
🛡️ Hackers stay away
🔍 What you see is what you sign
☮️ Life gets a lot less stressful
Anyone else experiencing these? 😉
4
4
27
2,853
⚠️ If your seed phrase has ever touched an online device, assume it’s compromised.
Move to an air-gapped signer like Keystone 🫡
Move to an air-gapped signer like Keystone 🫡
Your hardware wallet shouldn't need to stay connected to protect your crypto.
With air-gapped QR signing:
→ Review the transaction
→ Sign offline
→ Scan the signed transaction back
No direct USB or Bluetooth signing connection.
Keep your keys offline. Keep control in your hands. 🔐
5
3
34
3,053
12.8s to 150ms finality 🚀
Huge congrats to @anza_xyz and @solana on shipping Alpenglow, and to every validator who made the switch!
Solana fam, next time you send a txn, don’t blink.
Huge congrats to @anza_xyz and @solana on shipping Alpenglow, and to every validator who made the switch!
Solana fam, next time you send a txn, don’t blink.
Alpenglow is now live on Solana mainnet. ⛰️
Finality just went from ~12.8 seconds to ~150ms.
The biggest consensus upgrade in Solana’s history, built by @anza_xyz.
1
1
14
2,524
Your hardware wallet shouldn't need to stay connected to protect your crypto.
With air-gapped QR signing:
→ Review the transaction
→ Sign offline
→ Scan the signed transaction back
No direct USB or Bluetooth signing connection.
Keep your keys offline. Keep control in your hands. 🔐
With air-gapped QR signing:
→ Review the transaction
→ Sign offline
→ Scan the signed transaction back
No direct USB or Bluetooth signing connection.
Keep your keys offline. Keep control in your hands. 🔐
6
5
50
4,956
📣 The Ledger supply chain attack is a wake-up call for every hardware wallet maker. Us included.
And we’re treating it like one.
Here’s what that means:
Our team is auditing our entire supply chain, starting with how we vet and manage resellers, and tightening controls ttack could slip through.
On the device side, the Keystone 3 Pro already ships with anti-tamper protection, and we’ll make it even tougher in every device that follows.
Keeping your keys safe is the reason Keystone exists. We’ll work every day to stop attacks like this before they ever reach you.
Huge thanks to the whole Keystone community for your continued support 💙
And we’re treating it like one.
Here’s what that means:
Our team is auditing our entire supply chain, starting with how we vet and manage resellers, and tightening controls ttack could slip through.
On the device side, the Keystone 3 Pro already ships with anti-tamper protection, and we’ll make it even tougher in every device that follows.
Keeping your keys safe is the reason Keystone exists. We’ll work every day to stop attacks like this before they ever reach you.
Huge thanks to the whole Keystone community for your continued support 💙
18
5
105
6,556
Into @Zcash & on-chain privacy? 🛡️
All it takes:
1. A Keystone 3 Pro
2. Connect to @zodl_app/@vizorwallet
3. Move your $ZEC from CEX to Keystone & shield it.
That's it.
Full privacy, air-gapped security under your control 🔐
All it takes:
1. A Keystone 3 Pro
2. Connect to @zodl_app/@vizorwallet
3. Move your $ZEC from CEX to Keystone & shield it.
That's it.
Full privacy, air-gapped security under your control 🔐
It started 10 years ago
a codebase fork of Bitcoin with privacy built into the protocol
the first real-world implementation of zero knowledge proofs
2
2
23
2,344
Clear-signing isn’t just for experts ⚠️
Small swap or big transfer, you should know exactly what you’re signing.
Start the txn on Nexus, then check every detail on your Keystone screen.
Here’s what that looks like 👇
Small swap or big transfer, you should know exactly what you’re signing.
Start the txn on Nexus, then check every detail on your Keystone screen.
Here’s what that looks like 👇
4
5
28
2,346
Fire, floods, faded ink. Paper loses to all three
If your seed phrase lives on paper, so does your Bitcoin.
@dhoneysett shows why metal wins and how Keystone's tablets stack up.
Watch it before you trust paper again:
youtube.com/watch?v=Bk3_Xl…
If your seed phrase lives on paper, so does your Bitcoin.
@dhoneysett shows why metal wins and how Keystone's tablets stack up.
Watch it before you trust paper again:
youtube.com/watch?v=Bk3_Xl…
1
0
15
2,739
Any project can call itself "quantum-resistant" today. There's no shared way to check.
The Quantum Alliance launched to fix that, and Business Insider has the story.
We're building open standards and public test criteria for chains, wallets, and infra with @QuantusNetwork, ub, @quipnetwork, @thevault_soft, @PQabelian, @intmaxIO, and @Americanfort_io.
Our CTO, @aaron1sme, will represent Keystone on wallet security and build on existing work toward common specs, from secure elements to recovery flows.
Read it here 👇
markets.businessinsider.com/news/stocks/qu…
The Quantum Alliance launched to fix that, and Business Insider has the story.
We're building open standards and public test criteria for chains, wallets, and infra with @QuantusNetwork, ub, @quipnetwork, @thevault_soft, @PQabelian, @intmaxIO, and @Americanfort_io.
Our CTO, @aaron1sme, will represent Keystone on wallet security and build on existing work toward common specs, from secure elements to recovery flows.
Read it here 👇
markets.businessinsider.com/news/stocks/qu…
16
8
54
3,084
Keystone Hardware Wallet retweeted
Są portfele sprzętowe i portfele sprzętowe. 🔐
Keystone ma system zabezpieczeń, który reaguje na próbę ingerencji we wnętrze urządzenia. Na wideo możecie zobaczyć, jak działa to w praktyce: po naruszeniu zabezpieczeń portfel staje się bezużyteczny.
Keystone ma system zabezpieczeń, który reaguje na próbę ingerencji we wnętrze urządzenia. Na wideo możecie zobaczyć, jak działa to w praktyce: po naruszeniu zabezpieczeń portfel staje się bezużyteczny.
6
3
26
4,534
1/
Your Zcash wallet hands you a fresh receiving address every time. Great for privacy.
But how do you know that address is really yours?
Keystone firmware v3.1.4 lets you check it on your device before you share it.
Update your Keystone 3 Pro and try it out.
Your Zcash wallet hands you a fresh receiving address every time. Great for privacy.
But how do you know that address is really yours?
Keystone firmware v3.1.4 lets you check it on your device before you share it.
Update your Keystone 3 Pro and try it out.
3
1
20
2,381
2/
Curious how the verification works and how Keystone tells each address apart? We broke it all down here:
keyst.one/zcash/updates/…
Curious how the verification works and how Keystone tells each address apart? We broke it all down here:
keyst.one/zcash/updates/…
0
0
4
610
Clear-signing is for everyone ✨
Firmware v3.1.4 sharpens transaction parsing for SOL and TRX, so you know exactly what you’re signing before you hit confirm.
Wallet setup got smoother too.
Holding SOL or TRX? Update your Keystone today 💪
Firmware v3.1.4 sharpens transaction parsing for SOL and TRX, so you know exactly what you’re signing before you hit confirm.
Wallet setup got smoother too.
Holding SOL or TRX? Update your Keystone today 💪
1
3
30
2,134
🚨 1,404 Qubic wallets just got drained for about $1.3M.
Older Qubic wallet versions generated seed phrases with weak randomness, and an attacker worked out the keys. Qubic halted the network, and most of the stolen funds are frozen for now.
Why updating the app won't save you:
→ A seed phrase is just a random number written as words.
→ If that number isn't random enough, someone else can regenerate it.
→ The v4.26.4 fix only protects seeds made after the patch.
You're exposed if you made your seed before Oct 18 in any browser on an iPhone or iPad, in Safari on a Mac, or in the iOS app before July 2025.
If that's you, update the Qubic wallet, generate a new seed, and move your funds once the network is back up. Treat the old seed as burned.
For long-term holdings, go further:
→ Get a hardware wallet and generate a fresh seed on the device itself.
→ Write it down, store it somewhere safe offline, and keep it off your phone, your photos, and the cloud.
Keystone builds your seed offline from three separate sources of randomness, plus your own dice rolls if you want.
Older Qubic wallet versions generated seed phrases with weak randomness, and an attacker worked out the keys. Qubic halted the network, and most of the stolen funds are frozen for now.
Why updating the app won't save you:
→ A seed phrase is just a random number written as words.
→ If that number isn't random enough, someone else can regenerate it.
→ The v4.26.4 fix only protects seeds made after the patch.
You're exposed if you made your seed before Oct 18 in any browser on an iPhone or iPad, in Safari on a Mac, or in the iOS app before July 2025.
If that's you, update the Qubic wallet, generate a new seed, and move your funds once the network is back up. Treat the old seed as burned.
For long-term holdings, go further:
→ Get a hardware wallet and generate a fresh seed on the device itself.
→ Write it down, store it somewhere safe offline, and keep it off your phone, your photos, and the cloud.
Keystone builds your seed offline from three separate sources of randomness, plus your own dice rolls if you want.
Security incident update.
Between 23:42 UTC on 17 October and 01:26 UTC on 18 October, an attacker drained 1,404 Qubic wallets, totalling around 2.94 trillion QU.
Here is what happened, what has been done, and what comes next.
3
3
40
4,757
What if someone gets to your Keystone 3 Pro before you do? 👀
You’ve asked us this a lot, so we put it on camera 💥
Watch to the end and share it with anyone who’s asked you the same thing 🫡
You’ve asked us this a lot, so we put it on camera 💥
Watch to the end and share it with anyone who’s asked you the same thing 🫡
51
58
325
28,210
Ever wondered what happens when someone tries to tamper with a Keystone 3 Pro?
You’ll see it today. Stay tuned.
You’ll see it today. Stay tuned.
12
11
124
4,778
We’re joining @QuantusNetwork’s Quantum Alliance.
Our CTO @aaron1sme will represent Keystone on wallet security and build on existing work toward common specs, from secure elements to recovery flows.
Post-quantum keys shouldn’t need a different setup for every wallet.
Our CTO @aaron1sme will represent Keystone on wallet security and build on existing work toward common specs, from secure elements to recovery flows.
Post-quantum keys shouldn’t need a different setup for every wallet.
“Post-quantum” is now a marketing buzzword.
We’re here to separate the legit tech from the vaporware.
Today, ten contributors from across the industry launch the Quantum Alliance.
This open standards body will define blockchain quantum readiness.
Contributors submit proposals and earn support through evidence and working code.
Founding contributors:
@YuviLightman, @QuantusNetwork
@MehowHacks, @Americanfort_io
@HiokiLeona, @intmaxIO
@aaron1sme, @KeystoneWallet
@SebastienGllmt, @midnightfdn
@cadillion and @rcarback, @quipnetwork
@PQA_Rich, @PQabelian
@bizdevving, @thevault_soft
@katina_messinis, @hackenclub
thequantuminsider.com/2026/10/15/qua…
4
4
66
3,700
Keystone Hardware Wallet retweeted
Today leaders from nine blockchain organisations launched the Quantum Alliance, an open standards body working out what "quantum-resistant" should mean for blockchain networks and how such a claim can be verified. The founding contributors come from @QuantusNetwork, Postquant nightfdn, @KeystoneWallet, @Americanfort_io, @intmaxIO, @PQabelian, @hackenclub and The Vault, and we are glad to take part through our CRO Bryn Bennett.
The need is easy to see: in May one index ranked Ethereum second among quantum-prepared networks, while another scorecard, counting only cryptography already in production, gives it an F. The Alliance will publish an open definition of readiness, test criteria any team can run against its own implementation and reference designs for migration, with work starting in four groups on migration, post-quantum zero-knowledge systems, wallet security and cross-chain compatibility.
For a custodian this is a practical matter, as the institutions we work with will need to judge the quantum readiness of every network and provider they rely on, ours included, and a shared public standard gives that judgement solid ground as we develop post-quantum custody of our own.
Read more on our website: thevault.inc/company/newsro…
The need is easy to see: in May one index ranked Ethereum second among quantum-prepared networks, while another scorecard, counting only cryptography already in production, gives it an F. The Alliance will publish an open definition of readiness, test criteria any team can run against its own implementation and reference designs for migration, with work starting in four groups on migration, post-quantum zero-knowledge systems, wallet security and cross-chain compatibility.
For a custodian this is a practical matter, as the institutions we work with will need to judge the quantum readiness of every network and provider they rely on, ours included, and a shared public standard gives that judgement solid ground as we develop post-quantum custody of our own.
Read more on our website: thevault.inc/company/newsro…
2
1
11
1,231