Keystone 3 Pro: custody score 54%

Keystone · Multi-asset · checked 2026-11-05. 46 of 85 points from sourced facts. Shipping suspended

Keystone suspended shipping and is destroying 18,835 unsold devices after its genuine-check key was stolen. We link the official site, without our affiliate code, until it ships devices with a new key.

Score, input by input

Input	What we found	Points	Source
Supply chain and authenticity Genuine-device check	Compromised: The website check used to confirm a device is genuine relied on a key stolen on October 20, 2026; Keystone says it can't fully rule out fakes received after that date.	0/10	source
Supply chain and authenticity Official reseller list	Not confirmed: Keystone sells through Amazon official stores and authorized resellers; we couldn't find a published list.	2/5	source
Supply chain and authenticity Tamper evidence	Strong: Erases stored keys if it detects physical tampering.	5/5	source
Supply chain and authenticity Response to reseller incidents	No incident: None on record.	5/5	—
Key protection Secure element	Uncertified chip: Secure elements (three on the 3 Pro); certification not stated.	4/6	source
Key protection Open firmware	Open source: Open-source secure-element firmware and app layer on GitHub.	7/9	source
Signing safety Own screen to check what you sign	Yes: 4-inch touchscreen; signs by QR code.	15/15	source
Customer data exposure (36 months) Customer data	Own systems breached: Oct 20, 2026: website breach exposed 25,964 buyers' names, contact, shipping and order details.	0/15	source
Incident record (24 months) Security incidents	Flaw, no losses: Oct 2026: genuine-check key and buyer data stolen from its website; Keystone says recovery phrases and keys weren't involved; no losses reported.	8/15	source

Incidents

2026-10-26 Full statement: genuine-check (WebAuth) key and buyer records stolen via a third-party tool on its website; 18,835 devices to be destroyed, shipping suspended. source

Where to buy safely

Buy from the maker: keyst.one.
Resellers: Keystone sells through Amazon official stores and authorized resellers; we couldn't find a published list. source
On arrival: check the packaging, run the genuine-device check, and reject any device that already has a PIN or recovery phrase set.

Official links, known fakes and the full incident list: TAS Check: Keystone.

Keep it away from your bots

A hardware wallet is the vault. Don't connect it to a trading bot, an API key or an agent wallet: give the bot a separate trading float and sweep profits back to the vault's address. How to split vault, float and sweeps. Set up Keystone 3 Pro as cold storage, step by step.

Questions

Is Keystone 3 Pro safe?

Keystone 3 Pro scores 54% on our custody score (46 of 85 points from sourced facts, checked 2026-11-05). Weakest point: The website check used to confirm a device is genuine relied on a key stolen on October 20, 2026; Keystone says it can't fully rule out fakes received after that date.

Has Keystone had a security incident?

Oct 2026: genuine-check key and buyer data stolen from its website; Keystone says recovery phrases and keys weren't involved; no losses reported.

Where should I buy Keystone 3 Pro?

From the maker's store (keyst.one). Resellers: Keystone sells through Amazon official stores and authorized resellers; we couldn't find a published list. On arrival, run the genuine-device check and reject any device that already has a PIN or recovery phrase set.

Other hardware wallets, scored

OneKey Pro: 94%BitBox02 Nova: 89%Blockstream Jade Plus: 79%Trezor Safe 5: 78%CoolWallet Pro: 72%Foundation Passport Prime: 66%Tangem Wallet: 66%Coldcard Q: 49%Ledger Flex: 49%

All hardware wallets, scored · Is this seller authorized? · How we score