Azoundria: Created page with "{{Imported Case Study With About|source=https://www.quadrigainitiative.com/casestudy/keystonehardwarewallettwitterxaccountphishing.php}} {{Unattributed Sources}} Keystone Wallet Logo/HomepageKeystone Wallet is a hardware wallet offering cold storage for users. On October 29th, they started promoting a new token, which users could check their eligibility for on a new website. When users visited the site, they were prompted to provide per..."

2024-12-05T01:13:05Z

Created page with "{{Imported Case Study With About|source=https://www.quadrigainitiative.com/casestudy/keystonehardwarewallettwitterxaccountphishing.php}} {{Unattributed Sources}} thumb|Keystone Wallet Logo/HomepageKeystone Wallet is a hardware wallet offering cold storage for users. On October 29th, they started promoting a new token, which users could check their eligibility for on a new website. When users visited the site, they were prompted to provide per..."

New page

{{Imported Case Study With About|source=https://www.quadrigainitiative.com/casestudy/keystonehardwarewallettwitterxaccountphishing.php}}
{{Unattributed Sources}}

[[File:Keystonewallet.jpg|thumb|Keystone Wallet Logo/Homepage]]Keystone Wallet is a hardware wallet offering cold storage for users. On October 29th, they started promoting a new token, which users could check their eligibility for on a new website. When users visited the site, they were prompted to provide permissions to drain the funds from their wallet. Keystone Wallet did not acknowledge the hack, despite multiple users calling them out on it. It is unclear whether or not users were affected and what plan, if any, Keystone Wallet has to assist affected users.<ref name="evilcostwitter-16906" /><ref name="keystonewallettwitter-16907" /><ref name="keystonewallettwitter-16908" /><ref name="draganovangelo1twitter-16909" /><ref name="reddit-16910" /><ref name="kryptokrazy2024twitter-16911" /><ref name="wangxiaoloutwitter-16912" /><ref name="atriumlabtwitter-16913" /><ref name="cerkoryntwitter-16914" /><ref name="crypt0n1tetwitter-16915" /><ref name="montesinojmtwitter-16916" /><ref name="cryptolensnewstwitter-16917" /><ref name="bagjuna9twitter-16918" /><ref name="moonwhalestwitter-16919" /><ref name="cryptovkafeedtwitter-16920" /><ref name="beausecuritytwitter-16921" /><ref name="keystonewallettwitter-16922" /><ref name="panewscntwitter-16923" /><ref name="boxmrchentwitter-16924" /><ref name="beemannltwitter-16925" /><ref name="thepulsewallettwitter-16926" />

== About Keystone Wallet ==
"Secure Cold Wallet for Effortless Transactions. Keystone offers seamless compatibility with leading wallets such as MetaMask, OKX Wallet, Tonkeeper, Solflare, Backpack, Blue Wallet, Keplr, Eternl and others, ensuring top-tier security for a wide range of cryptocurrencies, including Bitcoin and Ethereum."

"Big News from Keystone! Preregistration is now open for Keyston's exclusive new token! Known for our secure hardware wallets, we're taking the next step in crypto security by launching our very own token - designed with safety at its core."

== The Reality ==
This sections is included if a case involved deception or information that was unknown at the time. Examples include:

* When the service was actually started (if different than the "official story").
* Who actually ran a service and their own personal history.
* How the service was structured behind the scenes. (For example, there was no "trading bot".)
* Details of what audits reported and how vulnerabilities were missed during auditing.

== What Happened ==
"The official X account of the hardware wallet Keystone is suspected to have been hacked. Users are advised to remain vigilant and be cautious of potential risks."
{| class="wikitable"
|+Key Event Timeline - Keystone Hardware Wallet Twitter/X Account Phishing
!Date
!Event
!Description
|-
|October 29th, 2024 11:00:00 AM MDT
|Last Post Prior To Hack
|The last post on the Keystone Hardware Wallet Twitter/X page prior to the breach of the account.
|-
|October 29th, 2024 6:15:00 PM MDT
|Estimate Of Post Made
|An estimate of when the malicious post was made in the Keystone Twitter account.
|-
|October 29th, 2024 6:19:00 PM MDT
|Screenshot And Post Made
|Pulse wallet posts about the breached account, including a screenshot and warning post.
|-
|October 29th, 2024 6:20:00 PM MDT
|Compromised Account First Post
|The First post which mentions a compromised account from beeman_nl.
|-
|October 29th, 2024 6:35:00 PM MDT
|Compromised Account Screenshot
|A screenshot is posted of the compromised account.
|-
|October 30th, 2024 2:32:00 AM MDT
|Apology Demanded
|The user boreegunbread posts a screenshot of the exploit and demands an apology from the Keystone Wallet team.
|-
|November 4th, 2024 5:08:00 AM MST
|First Post Following Hack
|The first post by the Keystone Hardware wallet following the breach of their Twitter account.
|-
|November 4th, 2024 5:16:00 AM MST
|DraganovAngelo1 Asking
|Twitter/X user DraganovAngelo1 asks Keystone when they plan to issue an official statement.
|-
|November 4th, 2024 6:16:00 AM MST
|Sent Response To Fam
|The Keystone Hardware wallet team replies to DraganovAngelo1, calling them "fam" and stating that they've responded via direct message.
|}

== Technical Details ==
This section includes specific detailed technical analysis of any security breaches which happened. What specific software vulnerabilities contributed to the problem and how were they exploited?

== Total Amount Lost ==
The total amount lost is unknown.

How much was lost and how was it calculated? If there are conflicting reports, which are accurate and where does the discrepancy lie?

== Immediate Reactions ==
How did the various parties involved (firm, platform, management, and/or affected individual(s)) deal with the events? Were services shut down? Were announcements made? Were groups formed?

== Ultimate Outcome ==
What was the end result? Was any investigation done? Were any individuals prosecuted? Was there a lawsuit? Was any tracing done?

== Total Amount Recovered ==
There do not appear to have been any funds recovered in this case.

What funds were recovered? What funds were reimbursed for those affected users?

== Ongoing Developments ==
What parts of this case are still remaining to be concluded?
== Individual Prevention Policies ==
{{Prevention:Individuals:Placeholder}}

{{Prevention:Individuals:End}}

== Platform Prevention Policies ==
{{Prevention:Platforms:Placeholder}}

{{Prevention:Platforms:End}}

== Regulatory Prevention Policies ==
{{Prevention:Regulators:Placeholder}}

{{Prevention:Regulators:End}}

== References ==
<references><ref name="evilcostwitter-16906">[https://twitter.com/evilcos/status/1851427481464848699 @evilcos Twitter] (Accessed Dec 4, 2024)</ref>

<ref name="keystonewallettwitter-16907">[https://twitter.com/KeystoneWallet/status/1851308073438294375 @KeystoneWallet Twitter] (Accessed Dec 4, 2024)</ref>

<ref name="keystonewallettwitter-16908">[https://twitter.com/KeystoneWallet/status/1853426046760337857 @KeystoneWallet Twitter] (Accessed Dec 4, 2024)</ref>

<ref name="draganovangelo1twitter-16909">[https://twitter.com/DraganovAngelo1/status/1853410932036161562 @DraganovAngelo1 Twitter] (Accessed Dec 4, 2024)</ref>

<ref name="reddit-16910">[https://www.reddit.com/r/KeystoneWallet/ https://www.reddit.com/r/KeystoneWallet/] (Accessed Dec 4, 2024)</ref>

<ref name="kryptokrazy2024twitter-16911">[https://twitter.com/kryptoKrazy2024/status/1851663764396888352 @kryptoKrazy2024 Twitter] (Accessed Dec 4, 2024)</ref>

<ref name="wangxiaoloutwitter-16912">[https://twitter.com/wang_xiaolou/status/1851451847837696298 @wang_xiaolou Twitter] (Accessed Dec 4, 2024)</ref>

<ref name="atriumlabtwitter-16913">[https://twitter.com/atrium_lab/status/1851563580543385848 @atrium_lab Twitter] (Accessed Dec 4, 2024)</ref>

<ref name="cerkoryntwitter-16914">[https://twitter.com/Cerkoryn/status/1851422666621686143 @Cerkoryn Twitter] (Accessed Dec 4, 2024)</ref>

<ref name="crypt0n1tetwitter-16915">[https://twitter.com/CRYPT0N1TE/status/1851450652372668838 @CRYPT0N1TE Twitter] (Accessed Dec 4, 2024)</ref>

<ref name="montesinojmtwitter-16916">[https://twitter.com/Montesino_jm/status/1851536909324914896 @Montesino_jm Twitter] (Accessed Dec 4, 2024)</ref>

<ref name="cryptolensnewstwitter-16917">[https://twitter.com/cryptolens_news/status/1851486327436411156 @cryptolens_news Twitter] (Accessed Dec 4, 2024)</ref>

<ref name="bagjuna9twitter-16918">[https://twitter.com/bagjuna9/status/1852572944586907681 @bagjuna9 Twitter] (Accessed Dec 4, 2024)</ref>

<ref name="moonwhalestwitter-16919">[https://twitter.com/Moon_Whales_/status/1851469243511906473 @Moon_Whales_ Twitter] (Accessed Dec 4, 2024)</ref>

<ref name="cryptovkafeedtwitter-16920">[https://twitter.com/CryptovkaFeed/status/1851469033700315288 @CryptovkaFeed Twitter] (Accessed Dec 4, 2024)</ref>

<ref name="beausecuritytwitter-16921">[https://twitter.com/beausecurity/status/1851421915099119674 @beausecurity Twitter] (Accessed Dec 4, 2024)</ref>

<ref name="keystonewallettwitter-16922">[https://twitter.com/KeystoneWallet/status/1851417732375265296 @KeystoneWallet Twitter] (Accessed Dec 4, 2024)</ref>

<ref name="panewscntwitter-16923">[https://twitter.com/PANewsCN/status/1851429089300852840 @PANewsCN Twitter] (Accessed Dec 4, 2024)</ref>

<ref name="boxmrchentwitter-16924">[https://twitter.com/BoxMrChen/status/1851446667939356884 @BoxMrChen Twitter] (Accessed Dec 4, 2024)</ref>

<ref name="beemannltwitter-16925">[https://twitter.com/beeman_nl/status/1851418970110197873 @beeman_nl Twitter] (Accessed Dec 4, 2024)</ref>

<ref name="thepulsewallettwitter-16926">[https://twitter.com/ThePulseWallet/status/1851420397046284478 @ThePulseWallet Twitter] (Accessed Dec 4, 2024)</ref></references>

Keystone Hardware Wallet Twitter/X Account Phishing - Revision history