# Keystone 3 Pro custody score: 54% | TradingAgentStack

> Keystone 3 Pro by Keystone: custody score 54% from sourced facts on supply chain, key protection, signing, customer data and incidents. Checked 2026-11-05.

Canonical: https://tradingagentstack.com/custody/keystone/

1. [Home](https://tradingagentstack.com/)

2. [Custody](https://tradingagentstack.com/custody/)

3. Keystone 3 Pro

# Keystone 3 Pro: custody score 54%

Keystone · Multi-asset · checked 2026-11-05. 46 of 85 points from sourced facts. Shipping suspended

[Official store (keyst.one) →](https://keyst.one/)

Keystone suspended shipping and is destroying 18,835 unsold devices after its genuine-check key was stolen. We link the official site, without our affiliate code, until it ships devices with a new key.

## Score, input by input

| Input | What we found | Points | Source |
| --- | --- | --- | --- |
| Supply chain and authenticity Genuine-device check | Compromised: The website check used to confirm a device is genuine relied on a key stolen on October 20, 2026; Keystone says it can't fully rule out fakes received after that date. | 0/10 | [source](https://decrypt.co/381983/bitcoin-wallet-keystone-devices-destroyed-stolen-key) |
| Supply chain and authenticity Official reseller list | Not confirmed: Keystone sells through Amazon official stores and authorized resellers; we couldn't find a published list. | 2/5 | [source](https://thehackernews.com/2026/10/keystone-to-destroy-18835-hardware.html) |
| Supply chain and authenticity Tamper evidence | Strong: Erases stored keys if it detects physical tampering. | 5/5 | [source](https://bitcoinmagazine.com/business/crypto-wallet-maker-keystone-debuts-bitcoin-only-firmware-keystone-3-pro) |
| Supply chain and authenticity Response to reseller incidents | No incident: None on record. | 5/5 | — |
| Key protection Secure element | Uncertified chip: Secure elements (three on the 3 Pro); certification not stated. | 4/6 | [source](https://nexusfi.com/d/infrastructure/keystone-wallet/) |
| Key protection Open firmware | Open source: Open-source secure-element firmware and app layer on GitHub. | 7/9 | [source](https://support.keyst.one/about-keystone) |
| Signing safety Own screen to check what you sign | Yes: 4-inch touchscreen; signs by QR code. | 15/15 | [source](https://blockspot.io/wallet/keystone/) |
| Customer data exposure (36 months) Customer data | Own systems breached: Oct 20, 2026: website breach exposed 25,964 buyers' names, contact, shipping and order details. | 0/15 | [source](https://cryptobriefing.com/keystone-data-breach-exposed-2026/) |
| Incident record (24 months) Security incidents | Flaw, no losses: Oct 2026: genuine-check key and buyer data stolen from its website; Keystone says recovery phrases and keys weren't involved; no losses reported. | 8/15 | [source](https://x.com/KeystoneWallet/status/2114719318722404578) |

## Incidents

- **2026-10-26** Full statement: genuine-check (WebAuth) key and buyer records stolen via a third-party tool on its website; 18,835 devices to be destroyed, shipping suspended. [source](https://x.com/KeystoneWallet/status/2114719318722404578)

## Where to buy safely

- Buy from the maker: [keyst.one](https://keyst.one/).

- Resellers: Keystone sells through Amazon official stores and authorized resellers; we couldn't find a published list. [source](https://thehackernews.com/2026/10/keystone-to-destroy-18835-hardware.html)

- On arrival: check the packaging, run the genuine-device check, and reject any device that already has a PIN or recovery phrase set.

Official links, known fakes and the full incident list: [TAS Check: Keystone](https://tradingagentstack.com/check/keystone/).

## Keep it away from your bots

A hardware wallet is the vault. Don't connect it to a trading bot, an API key or an agent wallet: give the bot a separate trading float and sweep profits back to the vault's address. [How to split vault, float and sweeps](https://tradingagentstack.com/custody/#tiers). [Set up Keystone 3 Pro as cold storage, step by step](https://tradingagentstack.com/cold-storage/).

## Questions

### Is Keystone 3 Pro safe?

Keystone 3 Pro scores 54% on our custody score (46 of 85 points from sourced facts, checked 2026-11-05). Weakest point: The website check used to confirm a device is genuine relied on a key stolen on October 20, 2026; Keystone says it can't fully rule out fakes received after that date.

### Has Keystone had a security incident?

Oct 2026: genuine-check key and buyer data stolen from its website; Keystone says recovery phrases and keys weren't involved; no losses reported.

### Where should I buy Keystone 3 Pro?

From the maker's store (keyst.one). Resellers: Keystone sells through Amazon official stores and authorized resellers; we couldn't find a published list. On arrival, run the genuine-device check and reject any device that already has a PIN or recovery phrase set.

## Other hardware wallets, scored
[OneKey Pro: 94%](https://tradingagentstack.com/custody/onekey/)[BitBox02 Nova: 89%](https://tradingagentstack.com/custody/bitbox/)[Blockstream Jade Plus: 79%](https://tradingagentstack.com/custody/blockstream-jade/)[Trezor Safe 5: 78%](https://tradingagentstack.com/custody/trezor/)[CoolWallet Pro: 72%](https://tradingagentstack.com/custody/coolwallet/)[Foundation Passport Prime: 66%](https://tradingagentstack.com/custody/foundation-passport/)[Tangem Wallet: 66%](https://tradingagentstack.com/custody/tangem/)[Coldcard Q: 49%](https://tradingagentstack.com/custody/coldcard/)[Ledger Flex: 49%](https://tradingagentstack.com/custody/ledger/)

[All hardware wallets, scored](https://tradingagentstack.com/custody/) · [Is this seller authorized?](https://tradingagentstack.com/custody/#reseller-check) · [How we score](https://tradingagentstack.com/custody/#method)

## For agents

- [When to use this site, and the page index](https://tradingagentstack.com/llms.txt)
- [Sitemap](https://tradingagentstack.com/sitemap.xml)
- [Contact](https://tradingagentstack.com/contact/)
- [MCP server](https://tradingagentstack.com/mcp/)
- [MCP discovery](https://tradingagentstack.com/.well-known/mcp)