Most people think linking a hardware wallet to a software wallet exposes your keys 🤔
It doesn’t.
Keystone shows a QR code of your xPub, a one-way derivation of your private key.
Nexus scans it & derives your addresses locally.
Your keys never go online. That’s air-gapped 🧊
It doesn’t.
Keystone shows a QR code of your xPub, a one-way derivation of your private key.
Nexus scans it & derives your addresses locally.
Your keys never go online. That’s air-gapped 🧊
8
4
47
Side effects of using a Keystone hardware wallet with the Nexus app 👀
🥶 Your keys stay cold
🛡️ Hackers stay away
🔍 What you see is what you sign
☮️ Life gets a lot less stressful
Anyone else experiencing these? 😉
🥶 Your keys stay cold
🛡️ Hackers stay away
🔍 What you see is what you sign
☮️ Life gets a lot less stressful
Anyone else experiencing these? 😉
4
6
28
Your hardware wallet shouldn't need to stay connected to protect your crypto.
With air-gapped QR signing:
→ Review the transaction
→ Sign offline
→ Scan the signed transaction back
No direct USB or Bluetooth signing connection.
Keep your keys offline. Keep control in your hands. 🔐
With air-gapped QR signing:
→ Review the transaction
→ Sign offline
→ Scan the signed transaction back
No direct USB or Bluetooth signing connection.
Keep your keys offline. Keep control in your hands. 🔐
6
5
51
📣 The Ledger supply chain attack is a wake-up call for every hardware wallet maker. Us included.
And we’re treating it like one.
Here’s what that means:
Our team is auditing our entire supply chain, starting with how we vet and manage resellers, and tightening controls ttack could slip through.
On the device side, the Keystone 3 Pro already ships with anti-tamper protection, and we’ll make it even tougher in every device that follows.
Keeping your keys safe is the reason Keystone exists. We’ll work every day to stop attacks like this before they ever reach you.
Huge thanks to the whole Keystone community for your continued support 💙
And we’re treating it like one.
Here’s what that means:
Our team is auditing our entire supply chain, starting with how we vet and manage resellers, and tightening controls ttack could slip through.
On the device side, the Keystone 3 Pro already ships with anti-tamper protection, and we’ll make it even tougher in every device that follows.
Keeping your keys safe is the reason Keystone exists. We’ll work every day to stop attacks like this before they ever reach you.
Huge thanks to the whole Keystone community for your continued support 💙
18
5
105
Clear-signing isn’t just for experts ⚠️
Small swap or big transfer, you should know exactly what you’re signing.
Start the txn on Nexus, then check every detail on your Keystone screen.
Here’s what that looks like 👇
Small swap or big transfer, you should know exactly what you’re signing.
Start the txn on Nexus, then check every detail on your Keystone screen.
Here’s what that looks like 👇
4
5
28
Fire, floods, faded ink. Paper loses to all three
If your seed phrase lives on paper, so does your Bitcoin.
@dhoneysett shows why metal wins and how Keystone's tablets stack up.
Watch it before you trust paper again:
youtube.com/watch?v=Bk3_Xl…
If your seed phrase lives on paper, so does your Bitcoin.
@dhoneysett shows why metal wins and how Keystone's tablets stack up.
Watch it before you trust paper again:
youtube.com/watch?v=Bk3_Xl…
1
0
16
Any project can call itself "quantum-resistant" today. There's no shared way to check.
The Quantum Alliance launched to fix that, and Business Insider has the story.
We're building open standards and public test criteria for chains, wallets, and infra with @QuantusNetwork, ub, @quipnetwork, @thevault_soft, @PQabelian, @intmaxIO, and @Americanfort_io.
Our CTO, @aaron1sme, will represent Keystone on wallet security and build on existing work toward common specs, from secure elements to recovery flows.
Read it here 👇
markets.businessinsider.com/news/stocks/qu…
The Quantum Alliance launched to fix that, and Business Insider has the story.
We're building open standards and public test criteria for chains, wallets, and infra with @QuantusNetwork, ub, @quipnetwork, @thevault_soft, @PQabelian, @intmaxIO, and @Americanfort_io.
Our CTO, @aaron1sme, will represent Keystone on wallet security and build on existing work toward common specs, from secure elements to recovery flows.
Read it here 👇
markets.businessinsider.com/news/stocks/qu…
16
8
54
1/
Your Zcash wallet hands you a fresh receiving address every time. Great for privacy.
But how do you know that address is really yours?
Keystone firmware v3.1.4 lets you check it on your device before you share it.
Update your Keystone 3 Pro and try it out.
Your Zcash wallet hands you a fresh receiving address every time. Great for privacy.
But how do you know that address is really yours?
Keystone firmware v3.1.4 lets you check it on your device before you share it.
Update your Keystone 3 Pro and try it out.
3
1
20
Clear-signing is for everyone ✨
Firmware v3.1.4 sharpens transaction parsing for SOL and TRX, so you know exactly what you’re signing before you hit confirm.
Wallet setup got smoother too.
Holding SOL or TRX? Update your Keystone today 💪
Firmware v3.1.4 sharpens transaction parsing for SOL and TRX, so you know exactly what you’re signing before you hit confirm.
Wallet setup got smoother too.
Holding SOL or TRX? Update your Keystone today 💪
1
3
30
What if someone gets to your Keystone 3 Pro before you do? 👀
You’ve asked us this a lot, so we put it on camera 💥
Watch to the end and share it with anyone who’s asked you the same thing 🫡
You’ve asked us this a lot, so we put it on camera 💥
Watch to the end and share it with anyone who’s asked you the same thing 🫡
51
58
325
Ever wondered what happens when someone tries to tamper with a Keystone 3 Pro?
You’ll see it today. Stay tuned.
You’ll see it today. Stay tuned.
12
11
124
⚠️ If your device connects to the internet, it’s the wrong place for your seed phrase.
Switch to an air-gapped signing device like Keystone 3 Pro 🛡️
Don't wait for a year.
Do it today & thank us later 🤝
Switch to an air-gapped signing device like Keystone 3 Pro 🛡️
Don't wait for a year.
Do it today & thank us later 🤝
17
4
90
Your brain is a terrible random number generator 🧠
It loves patterns.
Patterns = predictability = risk.
So don’t pick your own seed phrase words. Let a hardware wallet generate it with true randomness.
Want a trustless setup?
Grab some dice and roll your own entropy 🎲
It loves patterns.
Patterns = predictability = risk.
So don’t pick your own seed phrase words. Let a hardware wallet generate it with true randomness.
Want a trustless setup?
Grab some dice and roll your own entropy 🎲
7
3
82
1/ Multi-vendor multisig is becoming the standard for removing single points of failure.
But if every signer blind-signs, you haven’t removed the single point of failure. You’ve moved it.
Keystone brings clear signing to multisig on Bitcoin, EVM, and Solana.
Here’s how 🧵👇
But if every signer blind-signs, you haven’t removed the single point of failure. You’ve moved it.
Keystone brings clear signing to multisig on Bitcoin, EVM, and Solana.
Here’s how 🧵👇
8
13
113
Tamper with a Keystone, and all you get is a brick 🧱
Intercepted in the supply chain or after it lands in your hands? It doesn't matter 🔥
Once tampered with, it's dead for good.
Here's what that looks like.
Intercepted in the supply chain or after it lands in your hands? It doesn't matter 🔥
Once tampered with, it's dead for good.
Here's what that looks like.
1/8
A hardware wallet is never more exposed than on its way to you.
Keystone is built to protect itself at every stage of that trip.
Here’s how we make sure the device you unbox is the exact one we shipped 🧵
47
61
479
7/8
The final check is one you run yourself.
Every Keystone 3 Pro ships with a pre-loaded verification key. Our server sends an encrypted challenge that only a genuine, untouched device can decrypt and sign.
Tampered unit? It fails, and you know before you deposit anything.
The final check is one you run yourself.
Every Keystone 3 Pro ships with a pre-loaded verification key. Our server sends an encrypted challenge that only a genuine, untouched device can decrypt and sign.
Tampered unit? It fails, and you know before you deposit anything.
2
2
41
6/8
Next layer: tamper-evident packaging.
There’s no way to open it without leaving visible damage.
So, to fool you, an attacker has to defeat the anti-tamper circuit and also fake the original packaging well enough to pass.
Next layer: tamper-evident packaging.
There’s no way to open it without leaving visible damage.
So, to fool you, an attacker has to defeat the anti-tamper circuit and also fake the original packaging well enough to pass.
1
1
34
1/8
A hardware wallet is never more exposed than on its way to you.
Keystone is built to protect itself at every stage of that trip.
Here’s how we make sure the device you unbox is the exact one we shipped 🧵
A hardware wallet is never more exposed than on its way to you.
Keystone is built to protect itself at every stage of that trip.
Here’s how we make sure the device you unbox is the exact one we shipped 🧵
35
45
272
GM fam 🙌
You only get one signing path forever:
📷 Air-gapped QR or 🔌 USB?
Which one, and why?
You only get one signing path forever:
📷 Air-gapped QR or 🔌 USB?
Which one, and why?
Your hardware wallet should never receive data you didn't ask for.
With QR, it can't 📷
That's the idea behind Keystone's QR signing. Every piece of data that reaches your wallet needs your permission first, and that permission is a physical action.
Here's how it works:
✅ You omes in
✅ Scan completes → The channel closes
Nothing stays connected. If your computer needs to send more, it has to generate a new QR, and you have to choose to scan it again.
Every single time.
USB and Bluetooth hand that control away. Once paired, both devices can keep exchanging data for the entire session, whether you're paying attention or not. You approve the connection once, and everything after happens without asking.
To be clear, QR doesn't make you untouchable. A compromised computer can still build a malicious transaction, and you'll be the one scanning it in.
That's why you should check every detail on your wallet's screen before you sign, no matter how the data arrived. Address, amount, contract. That screen is your final say.
Self-custody means you hold the keys.
QR means you also decide what gets near them 📷
7
1
32
"I don't need a hardware wallet."
Where are your keys? 🔐
Exchange? Someone else's keys.
Hot wallet? Keys on a live wire.
Keystone? Your keys, unplugged.
Make yourself the hard target.
Keystone 3 Pro + Nexus: cold storage for anyone done being easy prey 🛡️
Where are your keys? 🔐
Exchange? Someone else's keys.
Hot wallet? Keys on a live wire.
Keystone? Your keys, unplugged.
Make yourself the hard target.
Keystone 3 Pro + Nexus: cold storage for anyone done being easy prey 🛡️
4
4
24
When it comes to firmware, most people either update obsessively or not at all.
There's a better middle ground 👇
First, why updates matter:
→ Critical security fixes
→ Support for more assets
→ A smoother, faster experience
We get it. Updating with every single release don't expect you to.
So next time we announce a firmware update, take a quick look:
→ Does it include a security fix or a feature you actually want? Then update when you have a few calm minutes. No rush.
→ Nothing relevant to you? Feel free to skip it.
Just don't let it slide for too long. A device that's months behind misses out on the security upgrades, new asset support, and better experience your Keystone is built to deliver.
A simple rule: update at least once every 2-3 months.
Your device stays current, and you skip the pressure of chasing every release.
There's a better middle ground 👇
First, why updates matter:
→ Critical security fixes
→ Support for more assets
→ A smoother, faster experience
We get it. Updating with every single release don't expect you to.
So next time we announce a firmware update, take a quick look:
→ Does it include a security fix or a feature you actually want? Then update when you have a few calm minutes. No rush.
→ Nothing relevant to you? Feel free to skip it.
Just don't let it slide for too long. A device that's months behind misses out on the security upgrades, new asset support, and better experience your Keystone is built to deliver.
A simple rule: update at least once every 2-3 months.
Your device stays current, and you skip the pressure of chasing every release.
6
1
23
🚨 Stop copying addresses from your txn history!
Scammers are targeting high-value wallets, spamming them with dust txns from lookalike addresses generated via CREATE2 👾
Copy the wrong one, and your funds are gone forever.
→ Never copy from txn history
→ Check the full → Whitelist addresses you trust
Your habits are your last line of defense.
Scammers are targeting high-value wallets, spamming them with dust txns from lookalike addresses generated via CREATE2 👾
Copy the wrong one, and your funds are gone forever.
→ Never copy from txn history
→ Check the full → Whitelist addresses you trust
Your habits are your last line of defense.
⚠️ Another victim lost $12,000 in USDC to an address poisoning attack on Ethereum.
Same pattern as yesterday: the first 4 and last 6 characters match.
correct: 0xbc3a1b97285a7c3bfee67dba8d54e7b37b5f4686
wrong: 0xbc3ab786026c2031ea85e30f20553799b05f4686
3
10
55
⚠️ Switching to a hardware wallet but importing your old hot wallet seed?
That seed already lived online.
Whatever exposure it had comes along with it.
Generate a new one on the device, then move your funds over.
Fresh. Offline. Safer 🛡️
That seed already lived online.
Whatever exposure it had comes along with it.
Generate a new one on the device, then move your funds over.
Fresh. Offline. Safer 🛡️
2
2
35
⚠️ Lost your seed phrase but still have your Keystone?
You have a window. Use it.
→ Create a second seed on your Keystone 3 Pro
→ Verify it and back it up offline
→ Move your funds to the new wallet
Your seed phrase is the only key to your crypto. Keep it offline & secure.
You have a window. Use it.
→ Create a second seed on your Keystone 3 Pro
→ Verify it and back it up offline
→ Move your funds to the new wallet
Your seed phrase is the only key to your crypto. Keep it offline & secure.
3
4
31
🚨 Never screenshot your seed phrase.
Malware like Spark Kitty silently slips past Apple App Store & Google Play reviews, hiding inside fake crypto tools and messaging apps.
Once installed, it scanned your entire photo library and uploaded any seed phrase screenshots directly to acreenshot. That's all it takes.
Follow the golden rules to stay safe:
❌ Never screenshot your seed phrase.
❌ Never store it digitally — anywhere.
✅ Write it down. Secure it on an SS tablet. Keep it offline.
Then let Keystone 3 Pro handle signing. Air-gapped keys, offline transactions, nothing on your phone worth stealing.
Simply put, your phone is an attack surface. So, your seed phrase shouldn't live on it.
Malware like Spark Kitty silently slips past Apple App Store & Google Play reviews, hiding inside fake crypto tools and messaging apps.
Once installed, it scanned your entire photo library and uploaded any seed phrase screenshots directly to acreenshot. That's all it takes.
Follow the golden rules to stay safe:
❌ Never screenshot your seed phrase.
❌ Never store it digitally — anywhere.
✅ Write it down. Secure it on an SS tablet. Keep it offline.
Then let Keystone 3 Pro handle signing. Air-gapped keys, offline transactions, nothing on your phone worth stealing.
Simply put, your phone is an attack surface. So, your seed phrase shouldn't live on it.
2
4
37
Real long-term holders don't leave their coins on a CEX!
This weekend, do it right:
▸ Set up your Keystone
▸ Back up your seed on steel
▸ Move your crypto off the exchange
▸ Manage it all with Keystone Nexus
A few steps now. Peace of mind for years.
This weekend, do it right:
▸ Set up your Keystone
▸ Back up your seed on steel
▸ Move your crypto off the exchange
▸ Manage it all with Keystone Nexus
A few steps now. Peace of mind for years.
5
4
43
At @Wo_Bitcoin '26? Don't leave without this.
The WOB 5th Anniversary Edition Keystone 3 Pro is waiting for you.
Buy it and pick it up right at the event without sharing any personal data 🙌
The WOB 5th Anniversary Edition Keystone 3 Pro is waiting for you.
Buy it and pick it up right at the event without sharing any personal data 🙌
🗣️ HOY, LA JORNADA PRINCIPAL DE WOB! '26
⏰ No llegues tarde: en la inauguración de las 10:00 tenemos una sorpresa 🎬
10:00 · Inauguración + sorpresa
10:10 · Bitcoin e IA: ¿arma o escudo?
11:35 · The trillion-dollar question
12:55 · El día después de Coldcard
16:30 · Nada que y las finanzas
19:35 · WoB Party
⚠️ Horarios sujetos a cambios: agenda actualizada en wobitcoin.org
📍 Espacio Pablo VI, Madrid
🎟️ wobitcoin.org/#entradas
#WOB26 #WatchOutBitcoin #Bitcoin #Madrid
2
3
11
Your hardware wallet should never receive data you didn't ask for.
With QR, it can't 📷
That's the idea behind Keystone's QR signing. Every piece of data that reaches your wallet needs your permission first, and that permission is a physical action.
Here's how it works:
✅ You omes in
✅ Scan completes → The channel closes
Nothing stays connected. If your computer needs to send more, it has to generate a new QR, and you have to choose to scan it again.
Every single time.
USB and Bluetooth hand that control away. Once paired, both devices can keep exchanging data for the entire session, whether you're paying attention or not. You approve the connection once, and everything after happens without asking.
To be clear, QR doesn't make you untouchable. A compromised computer can still build a malicious transaction, and you'll be the one scanning it in.
That's why you should check every detail on your wallet's screen before you sign, no matter how the data arrived. Address, amount, contract. That screen is your final say.
Self-custody means you hold the keys.
QR means you also decide what gets near them 📷
With QR, it can't 📷
That's the idea behind Keystone's QR signing. Every piece of data that reaches your wallet needs your permission first, and that permission is a physical action.
Here's how it works:
✅ You omes in
✅ Scan completes → The channel closes
Nothing stays connected. If your computer needs to send more, it has to generate a new QR, and you have to choose to scan it again.
Every single time.
USB and Bluetooth hand that control away. Once paired, both devices can keep exchanging data for the entire session, whether you're paying attention or not. You approve the connection once, and everything after happens without asking.
To be clear, QR doesn't make you untouchable. A compromised computer can still build a malicious transaction, and you'll be the one scanning it in.
That's why you should check every detail on your wallet's screen before you sign, no matter how the data arrived. Address, amount, contract. That screen is your final say.
Self-custody means you hold the keys.
QR means you also decide what gets near them 📷
1
3
26
You backed up your seed phrase. Set a passphrase. Did everything right.
Then someone got your device.
Maybe it was a theft.
Maybe you left it somewhere.
Maybe someone with the right tools and enough motivation decided your wallet was worth cracking open.
This is where the ade anti-tamper system becomes the last thing standing between them and your keys.
The moment unauthorized access is detected, the circuitry wipes everything stored in the secure elements.
No keys. Nothing to extract.
And it doesn't need you to be there for it to work.
Even if your main battery is dead, a dedicated button battery keeps the protection running for up to 2 years. In normal use, that protection window stretches past 3 years.
Your wallet is built to lose itself before it gives anything up.
Then someone got your device.
Maybe it was a theft.
Maybe you left it somewhere.
Maybe someone with the right tools and enough motivation decided your wallet was worth cracking open.
This is where the ade anti-tamper system becomes the last thing standing between them and your keys.
The moment unauthorized access is detected, the circuitry wipes everything stored in the secure elements.
No keys. Nothing to extract.
And it doesn't need you to be there for it to work.
Even if your main battery is dead, a dedicated button battery keeps the protection running for up to 2 years. In normal use, that protection window stretches past 3 years.
Your wallet is built to lose itself before it gives anything up.
14
5
73
You can already send, receive & swap on Keystone Nexus ⚠️
Name one missing feature that would make it your daily driver for managing funds.
Drop your honest suggestion below 👇
Name one missing feature that would make it your daily driver for managing funds.
Drop your honest suggestion below 👇
5
0
10
Nobody talks about this, but everyone does it 🤦♂️
Writing down seed phrases with zero labels, zero context, just vibes.
Keystone's Seed Phrase Check has you covered:
"…" → Device Settings → Wallet Settings → Seed Phrase Check
Tag that one friend who might need this.
Writing down seed phrases with zero labels, zero context, just vibes.
Keystone's Seed Phrase Check has you covered:
"…" → Device Settings → Wallet Settings → Seed Phrase Check
Tag that one friend who might need this.
4
0
23
If Keystone Nexus has made life easier, tell people 💙
A quick review on the App Store or Google Play means a lot.
Haven't tried it yet? Today's a good day to start 🙌
A quick review on the App Store or Google Play means a lot.
Haven't tried it yet? Today's a good day to start 🙌
5
0
24
Excited to be partnering with @Wo_Bitcoin for #WOB26!
To celebrate WOB's 5th Anniversary, we're bringing an exclusive Keystone 3 Pro to Madrid on May 2-4.
Very limited units only.
If you're going, you already know what to do ⚡️
To celebrate WOB's 5th Anniversary, we're bringing an exclusive Keystone 3 Pro to Madrid on May 2-4.
Very limited units only.
If you're going, you already know what to do ⚡️
🤝 QUIENES SUMAN A WOB! '26
Gracias a los partners:
Bitronics @BitronicsStore
Hash2Wear @hash2wear
Un Podcast sobre Bitcoin @alberto_mera
Prometea @prometeabtc
Bitvocation @bitvocation
Bleskomat @bleskomat
Bitcoinismo @BernabeuAdrian
IFEB @IFEBitcoin
Acelerando Bitcoin ts @RoboSats
Instituto Juan de Mariana @juandemariana
Sparrow Wallet @SparrowWallet
Keystone @KeystoneWallet
Bitcoin para pobres @btc4pobres
Barcelona Cyphers Conference @bcc8333
Bitcoin Honey Bees @jozelito83
Wesatoshi Labs @we_satoshis
UFM Madrid @en_UFMMadrid
Seed Hypermedia @seedhypermedia
WalletScrutiny @WalletScrutiny
Bitcoin Only @rottenwheel1
Alba.City
Students For Liberty @sfliberty
Trezor @Trezor
LABITCONF @labitconf
WC2140
MadBitcoin @MadBitcoin_
Y a los media partners:
CriptoTendencias @cripto_t
CriptoNoticias @CriptoNoticias
Crypto.news @cryptodotnews
Thrilld @ThrilldLabs
Diario Bitcoin @DiarioBitcoin
📅 2-4 oct · Madrid
🎟️ Entradas: wobitcoin.org/#entradas
#WOB26 #Bitcoin #Madrid #Partners
1
2
27
Your hardware, your code, your rules 🛠️
ForgeBox lets you program Keystone, set your own signing keys, and experiment without limits.
Same rock-solid build. Full control. No guardrails.
Start building with ForgeBox 👇keyst.one/shop/products/…
ForgeBox lets you program Keystone, set your own signing keys, and experiment without limits.
Same rock-solid build. Full control. No guardrails.
Start building with ForgeBox 👇keyst.one/shop/products/…
Hello, ForgeBox.
For a long time, cryptography researchers and developers have lacked a dedicated hardware device built for customization and experimentation.
Not a finished wallet. Not a closed HSM.
But a device you can fully control.
• Blockchain researchers running custom firmware to test new cryptographic algorithms and protocols
• Wallet developers integrating specialized security mechanisms to protect private keys and sensitive data
• Educators teaching the fundamentals of cryptography and blockchain with programmable hardware
ForgeBox is built for exactly this.
Powered by the Keystone 3 hardware wallet architecture, ForgeBox features:
• 🛡️ Three secure elements
• 🔌 USB-C + QR code connectivity
• 🔓 Fully open-source
Whether you’re doing research, building products, or teaching, ForgeBox provides a powerful and flexible platform for secure experimentation.
What can you build with ForgeBox?
•🤖 Agents: secure private data storage and isolated execution container for agents like #OpenClaw 🦞
•🔐 Your own HSM: generate, store, and use keys for encryption, decryption, and signing
•⛓️ Blockchain protocols: test new cryptographic primitives and build secure key-management solutions
• 🎓 Education: teach crypto with hardware that actually runs it
• …and much more, defined by the community
With ForgeBox, the possibilities are open-ended.
Pre-orders are open.
If you’re a developer, DM me — let’s build something interesting together 🚀.
6
0
19
Most people never verify their signing device's firmware before updating.
Here's how:
1️⃣ Load firmware onto an SD card
2️⃣ Settings → About → Firmware → Via MicroSD → Update → Show Checksum
3️⃣ Match the hash against the SHA-256 Checksum on GitHub
Don't trust. VERIFY.
Here's how:
1️⃣ Load firmware onto an SD card
2️⃣ Settings → About → Firmware → Via MicroSD → Update → Show Checksum
3️⃣ Match the hash against the SHA-256 Checksum on GitHub
Don't trust. VERIFY.
2
5
38
When Solana hit $8, most hardware wallets were looking the other way.
We shipped @SolflareWallet integration instead.
Air-gapped, QR-only. Bear market, didn't matter.
That was three years ago. Here's everything that followed:
@Backpack: QR and USB signing across extension and e: Day 1 support on Keystone 3 Pro.
@multisig Squads: clear-signing for on-chain treasury management.
@SolanaFndn: native hardware wallet support coming to the Solana CLI.
Along the way, @toly co-signed what we were building. When the founder of the chain you bet on tells you you're on the right track, you don't second-guess it.
500B+ total transactions. $3T+ DEX volume. $900M+ in ETF inflows.
Solana grew into all of that. We were just early enough to be ready 🔧
Three years in and still shipping.
What do you want us to build next for Solana? Drop your feedback below 👇
We shipped @SolflareWallet integration instead.
Air-gapped, QR-only. Bear market, didn't matter.
That was three years ago. Here's everything that followed:
@Backpack: QR and USB signing across extension and e: Day 1 support on Keystone 3 Pro.
@multisig Squads: clear-signing for on-chain treasury management.
@SolanaFndn: native hardware wallet support coming to the Solana CLI.
Along the way, @toly co-signed what we were building. When the founder of the chain you bet on tells you you're on the right track, you don't second-guess it.
500B+ total transactions. $3T+ DEX volume. $900M+ in ETF inflows.
Solana grew into all of that. We were just early enough to be ready 🔧
Three years in and still shipping.
What do you want us to build next for Solana? Drop your feedback below 👇
1
0
20
If you hold $ZEC, here's the only plan worth knowing👇
Under 0.5 ZEC? @zodl_app does the job.
0.5+ ZEC? Keystone + @zodl_app, fully shielded & secure.
Hot wallets are for exposure.
Hardware wallets are for ownership.
Don't just hold ZEC. Shield it 🛡️
Under 0.5 ZEC? @zodl_app does the job.
0.5+ ZEC? Keystone + @zodl_app, fully shielded & secure.
Hot wallets are for exposure.
Hardware wallets are for ownership.
Don't just hold ZEC. Shield it 🛡️
If you hold $ZEC, here's the only plan worth knowing👇
Under 1 ZEC? @zodl_app does the job.
1+ ZEC? Keystone + @zodl_app, fully shielded.
Hot wallets are for exposure.
Hardware wallets are for ownership.
Don't just hold ZEC. Shield it 🛡️
3
2
28
⚠️ In May 2024, someone lost 1155 WBTC in one of the most regrettable ways possible:
By copying an address from the transaction history.
A scammer had already slipped a look-alike address into that history. One wrong copy-paste, one confirmation, and it was over. On-chain an undo button.
This is called address poisoning, and it works because most people only glance at the first and last few characters before sending. That's the whole attack.
What actually keeps you safe:
→ Never pull an address from your transaction history. Go back to the original source every time.
→ Check the full address. Every character.
→ Keystone paired with Rabby & MetaMask will flag any new address before you sign. That warning exists for a reason.
Keystone 3 Pro shows the complete address on its air-gapped screen so you can verify exactly what you're signing before anything moves.
1155 WBTC lost over a 10-second shortcut.
Learn the lesson now before it costs you.
By copying an address from the transaction history.
A scammer had already slipped a look-alike address into that history. One wrong copy-paste, one confirmation, and it was over. On-chain an undo button.
This is called address poisoning, and it works because most people only glance at the first and last few characters before sending. That's the whole attack.
What actually keeps you safe:
→ Never pull an address from your transaction history. Go back to the original source every time.
→ Check the full address. Every character.
→ Keystone paired with Rabby & MetaMask will flag any new address before you sign. That warning exists for a reason.
Keystone 3 Pro shows the complete address on its air-gapped screen so you can verify exactly what you're signing before anything moves.
1155 WBTC lost over a 10-second shortcut.
Learn the lesson now before it costs you.
3
4
58
GM Keystone fam 🌞
Using your Keystone out in public?
Randomized PIN pad in settings keeps shoulder surfers guessing 😵💫
Or just use the fingerprint sensor to unlock and sign txns without a PIN at all ✨
Your Keystone. Your crypto. Your rules 💪
Using your Keystone out in public?
Randomized PIN pad in settings keeps shoulder surfers guessing 😵💫
Or just use the fingerprint sensor to unlock and sign txns without a PIN at all ✨
Your Keystone. Your crypto. Your rules 💪
Security sharpened. Capability expanded. 🔥
With the latest V-2.2.14, Keystone adds:
‣ BSC transfers + swaps in the Nexus app
‣ A scrambled PIN pad to confuse prying eyes
Update today, and tell us what you want for the next update.
6
5
66
Your @Cardano experience just got clearer 🤩
Keystone V3.1.0 lets you see exactly what you're signing.
Update your Keystone 3 Pro, pair with @eternlwallet or @vesprwallet, and sign with confidence.
Got a Cardano friend signing blind? Tag them 👇
Keystone V3.1.0 lets you see exactly what you're signing.
Update your Keystone 3 Pro, pair with @eternlwallet or @vesprwallet, and sign with confidence.
Got a Cardano friend signing blind? Tag them 👇
14
30
167
Sign your next @IOTA txn with absolute confidence 💪
Our latest update, V-3.1.0, brings transaction parsing so you can verify transfer and staking details right on your Keystone screen.
See "Unknown Transaction"? You still get the raw data right on screen to verify what you're eystone now, sync with @Nightly_app, and sign with clarity.
Share this with iota:native maxis in your circle.
Our latest update, V-3.1.0, brings transaction parsing so you can verify transfer and staking details right on your Keystone screen.
See "Unknown Transaction"? You still get the raw data right on screen to verify what you're eystone now, sync with @Nightly_app, and sign with clarity.
Share this with iota:native maxis in your circle.
1
21
94
You asked & we delivered 🙌
With V-3.1.0, Keystone now defaults to sub-account path-based addresses instead of account-based paths for Solana.
Here's how it improves compatibility with popular Solana wallets:
→ Addresses match during pairing
→ Easier recovery & migration
Combineana wallet & CLI support, this is another step toward a smoother Solana experience on Keystone.
Got feedback or suggestions to improve it further? Drop them below ⬇️
With V-3.1.0, Keystone now defaults to sub-account path-based addresses instead of account-based paths for Solana.
Here's how it improves compatibility with popular Solana wallets:
→ Addresses match during pairing
→ Easier recovery & migration
Combineana wallet & CLI support, this is another step toward a smoother Solana experience on Keystone.
Got feedback or suggestions to improve it further? Drop them below ⬇️
2
0
22
Don't sleep on this firmware update 🙌
Keystone 3 Pro V3.1.0:
→ Seed Backup reminders during updates & seed generation.
→ Cleaner clear-signing for IOTA & ADA
→ Sub-account Path is the default Solana path.
Care about security and clear-signing? Update now and share it!
Keystone 3 Pro V3.1.0:
→ Seed Backup reminders during updates & seed generation.
→ Cleaner clear-signing for IOTA & ADA
→ Sub-account Path is the default Solana path.
Care about security and clear-signing? Update now and share it!
1
1
29
Banks control your money & can freeze it anytime!
Bitcoin removes the middlemen, so people exchange value directly.
CEXs control your Bitcoin & can freeze it anytime.
We ended up recreating the problem we set out to solve.
Take back control with Keystone 3 Pro + Nexus app ✊
Bitcoin removes the middlemen, so people exchange value directly.
CEXs control your Bitcoin & can freeze it anytime.
We ended up recreating the problem we set out to solve.
Take back control with Keystone 3 Pro + Nexus app ✊
5
3
31
⚠️ Your signing device can be compromised before you ever open the box.
Supply chain attacks have gotten smarter. Attackers aren't just phishing anymore.
They're tampering with devices mid-shipment. Pushing fake apps through app stores/TestFlight and bundling malware inside ers.
The counterfeit looks identical to the real thing. But internally, the chip is built for one job: exfiltrating your seed phrase.
Fake "user guides" walk you straight into malicious software that mirrors real verification flows. The compromised device feels legit the whole time.
By the time you move assets in, they're already gone.
How to protect yourself:
→ Only buy from official channels and verified resellers.
→ No real wallet app ever asks for your seed phrase.
→ Only download companion software from the official site.
And most critically: verify your device before you use it.
This is what Keystone 3 Pro is built for.
Every unit ships with a pre-loaded verification key. Scan the QR code on our official site.
Device-generated code accepted = genuine. Fails = tampered.
One scan. No guessing. No trust required.
Verify everything. Trust nothing by default.
Supply chain attacks have gotten smarter. Attackers aren't just phishing anymore.
They're tampering with devices mid-shipment. Pushing fake apps through app stores/TestFlight and bundling malware inside ers.
The counterfeit looks identical to the real thing. But internally, the chip is built for one job: exfiltrating your seed phrase.
Fake "user guides" walk you straight into malicious software that mirrors real verification flows. The compromised device feels legit the whole time.
By the time you move assets in, they're already gone.
How to protect yourself:
→ Only buy from official channels and verified resellers.
→ No real wallet app ever asks for your seed phrase.
→ Only download companion software from the official site.
And most critically: verify your device before you use it.
This is what Keystone 3 Pro is built for.
Every unit ships with a pre-loaded verification key. Scan the QR code on our official site.
Device-generated code accepted = genuine. Fails = tampered.
One scan. No guessing. No trust required.
Verify everything. Trust nothing by default.
3
3
36
GM.
Most people use their signing device just to hold keys.
You can do a lot more: DeFi, governance, you name it.
Want to ease in? Try Nexus Swap first.
Most people use their signing device just to hold keys.
You can do a lot more: DeFi, governance, you name it.
Want to ease in? Try Nexus Swap first.
4
0
21