Keystone Hardware Wallet Twitter/X Account Phishing

From Quadriga Initiative Cryptocurrency Hacks, Scams, and Frauds Repository
Revision as of 19:13, 4 December 2024 by Azoundria (talk | contribs) (Created page with "{{Imported Case Study With About|source=https://www.quadrigainitiative.com/casestudy/keystonehardwarewallettwitterxaccountphishing.php}} {{Unattributed Sources}} thumb|Keystone Wallet Logo/HomepageKeystone Wallet is a hardware wallet offering cold storage for users. On October 29th, they started promoting a new token, which users could check their eligibility for on a new website. When users visited the site, they were prompted to provide per...")
(diff) ← Older revision | Latest revision (diff) | Newer revision → (diff)
Jump to navigation Jump to search

Notice: This page is a freshly imported case study from an original repository. While the original content had a similar format, some sections may not have been fully completed. Please help fill in any empty sections or any missing information you can find. If you are new here, please read General Tutorial on Wikis or Anatomy of a Case Study for help getting started.

Notice: This page contains sources which are not attributed to any text. The unattributed sources follow the initial description. Please assist by visiting each source, reviewing the content, and placing that reference next to any text it can be used to support. Feel free to add any information that you come across which isn't present already. Sources which don't contain any relevant information can be removed. Broken links can be replaced with versions from the Internet Archive. See General Tutorial on Wikis, Anatomy of a Case Study, and/or Citing Your Sources Guide for additional information. Thanks for your help!

Keystone Wallet Logo/Homepage

Keystone Wallet is a hardware wallet offering cold storage for users. On October 29th, they started promoting a new token, which users could check their eligibility for on a new website. When users visited the site, they were prompted to provide permissions to drain the funds from their wallet. Keystone Wallet did not acknowledge the hack, despite multiple users calling them out on it. It is unclear whether or not users were affected and what plan, if any, Keystone Wallet has to assist affected users.[1][2][3][4][5][6][7][8][9][10][11][12][13][14][15][16][17][18][19][20][21]

About Keystone Wallet

"Secure Cold Wallet for Effortless Transactions. Keystone offers seamless compatibility with leading wallets such as MetaMask, OKX Wallet, Tonkeeper, Solflare, Backpack, Blue Wallet, Keplr, Eternl and others, ensuring top-tier security for a wide range of cryptocurrencies, including Bitcoin and Ethereum."

"Big News from Keystone! Preregistration is now open for Keyston's exclusive new token! Known for our secure hardware wallets, we're taking the next step in crypto security by launching our very own token - designed with safety at its core."

The Reality

This sections is included if a case involved deception or information that was unknown at the time. Examples include:

  • When the service was actually started (if different than the "official story").
  • Who actually ran a service and their own personal history.
  • How the service was structured behind the scenes. (For example, there was no "trading bot".)
  • Details of what audits reported and how vulnerabilities were missed during auditing.

What Happened

"The official X account of the hardware wallet Keystone is suspected to have been hacked. Users are advised to remain vigilant and be cautious of potential risks."

Key Event Timeline - Keystone Hardware Wallet Twitter/X Account Phishing
Date Event Description
October 29th, 2024 11:00:00 AM MDT Last Post Prior To Hack The last post on the Keystone Hardware Wallet Twitter/X page prior to the breach of the account.
October 29th, 2024 6:15:00 PM MDT Estimate Of Post Made An estimate of when the malicious post was made in the Keystone Twitter account.
October 29th, 2024 6:19:00 PM MDT Screenshot And Post Made Pulse wallet posts about the breached account, including a screenshot and warning post.
October 29th, 2024 6:20:00 PM MDT Compromised Account First Post The First post which mentions a compromised account from beeman_nl.
October 29th, 2024 6:35:00 PM MDT Compromised Account Screenshot A screenshot is posted of the compromised account.
October 30th, 2024 2:32:00 AM MDT Apology Demanded The user boreegunbread posts a screenshot of the exploit and demands an apology from the Keystone Wallet team.
November 4th, 2024 5:08:00 AM MST First Post Following Hack The first post by the Keystone Hardware wallet following the breach of their Twitter account.
November 4th, 2024 5:16:00 AM MST DraganovAngelo1 Asking Twitter/X user DraganovAngelo1 asks Keystone when they plan to issue an official statement.
November 4th, 2024 6:16:00 AM MST Sent Response To Fam The Keystone Hardware wallet team replies to DraganovAngelo1, calling them "fam" and stating that they've responded via direct message.

Technical Details

This section includes specific detailed technical analysis of any security breaches which happened. What specific software vulnerabilities contributed to the problem and how were they exploited?

Total Amount Lost

The total amount lost is unknown.

How much was lost and how was it calculated? If there are conflicting reports, which are accurate and where does the discrepancy lie?

Immediate Reactions

How did the various parties involved (firm, platform, management, and/or affected individual(s)) deal with the events? Were services shut down? Were announcements made? Were groups formed?

Ultimate Outcome

What was the end result? Was any investigation done? Were any individuals prosecuted? Was there a lawsuit? Was any tracing done?

Total Amount Recovered

There do not appear to have been any funds recovered in this case.

What funds were recovered? What funds were reimbursed for those affected users?

Ongoing Developments

What parts of this case are still remaining to be concluded?

Individual Prevention Policies

No specific policies for individual prevention have yet been identified in this case.

For the full list of how to protect your funds as an individual, check our Prevention Policies for Individuals guide.

Platform Prevention Policies

Policies for platforms to take to prevent this situation have not yet been selected in this case.

For the full list of how to protect your funds as a financial service, check our Prevention Policies for Platforms guide.

Regulatory Prevention Policies

No specific regulatory policies have yet been identified in this case.

For the full list of regulatory policies that can prevent loss, check our Prevention Policies for Regulators guide.

References

  1. ↑ @evilcos Twitter (Accessed Dec 4, 2024)
  2. ↑ @KeystoneWallet Twitter (Accessed Dec 4, 2024)
  3. ↑ @KeystoneWallet Twitter (Accessed Dec 4, 2024)
  4. ↑ @DraganovAngelo1 Twitter (Accessed Dec 4, 2024)
  5. ↑ https://www.reddit.com/r/KeystoneWallet/ (Accessed Dec 4, 2024)
  6. ↑ @kryptoKrazy2024 Twitter (Accessed Dec 4, 2024)
  7. ↑ @wang_xiaolou Twitter (Accessed Dec 4, 2024)
  8. ↑ @atrium_lab Twitter (Accessed Dec 4, 2024)
  9. ↑ @Cerkoryn Twitter (Accessed Dec 4, 2024)
  10. ↑ @CRYPT0N1TE Twitter (Accessed Dec 4, 2024)
  11. ↑ @Montesino_jm Twitter (Accessed Dec 4, 2024)
  12. ↑ @cryptolens_news Twitter (Accessed Dec 4, 2024)
  13. ↑ @bagjuna9 Twitter (Accessed Dec 4, 2024)
  14. ↑ @Moon_Whales_ Twitter (Accessed Dec 4, 2024)
  15. ↑ @CryptovkaFeed Twitter (Accessed Dec 4, 2024)
  16. ↑ @beausecurity Twitter (Accessed Dec 4, 2024)
  17. ↑ @KeystoneWallet Twitter (Accessed Dec 4, 2024)
  18. ↑ @PANewsCN Twitter (Accessed Dec 4, 2024)
  19. ↑ @BoxMrChen Twitter (Accessed Dec 4, 2024)
  20. ↑ @beeman_nl Twitter (Accessed Dec 4, 2024)
  21. ↑ @ThePulseWallet Twitter (Accessed Dec 4, 2024)
Retrieved from "https://quadrigainitiative.com/cryptocurrencyhackscamfraudwiki/index.php?title=Keystone_Hardware_Wallet_Twitter/X_Account_Phishing&oldid=6386"