Once again reminding the hardware wallet retards that the risk that becomes real when you leak people’s SHIPPING INFORMATION is not phishing. It’s fucking PHYSICAL ASSAULTS AND KIDNAPPINGS.
We owe you an apology.
On October 20, we detected unauthorized access to our official website. After verifying API activity with Shopify, we confirmed on October 23 that a third party obtained customer shipping information. You trusted us with those details, and we're sorry we didn't keep them safe.
Exposed: names, contact details, shipping addresses, and order details (items and prices).
Not exposed: payment card or bank details, recovery phrases, private keys, or wallet passwords.
We've blocked access, fixed the vulnerability, opened an investigation, and are emailing affected customers.
Scammers may pose as Keystone by phone, text, email, or mail, offering refunds, replacement devices, or "fixes" for your order or address. None of it is from us.
NEVER share your recovery phrase or private keys, and NEVER enter your recovery phrase into a device you didn't order. We will never ask for them. Don't click links in unexpected messages. Type keyst.one yourself.
A detailed report is coming soon.
Until then, trust only our official channels. If anything feels off, email [email protected]. We'd rather hear from you than have you take a chance.
Again, we're truly sorry to everyone affected.
The takeaway of this php thing should not be “the world is ending today”.
Rather it should be “the software status quo was bad, and you should assume 70% of the Internet is already rooted by one three letter agency. AI helped us catch this and remove it from ongoing risk”
Bitconstruct retweeted
🚨Do not connect your wallet to anything today
A huge PHP bug leaked before the fix & hackers are already using it. This isn't just Japan, sites worldwide are switching themselves off
Some crypto websites run on WordPress, which runs on PHP. Project sites, token claim pages, airdrop pages, blogs & even wallet download pages could be targets
If one gets taken over, the connect wallet button can be swapped for a drainer, or the download link for a fake app, & you’d never know
Your wallet app itself is fine. The danger is the sites you connect it to
How to stay safe:
- Don't connect or sign anything on new sites today
- Skip any claim or airdrop page for now
- Ignore any “urgent security update” email or DM
- Only download wallet apps from the official app store
- Keep your main funds in a wallet you don't connect anywhere
No crypto site confirmed hit yet, but I'm not taking chances today
Bitconstruct retweeted
fear not!
this is no cyberpocalypse
this is the internet’s immune system finally waking up to an illness it has always had
a mere fever
the 0days were always there
the only thing that changed is awareness
now we begin the healing process ⚕️
Bitconstruct retweeted
Chatted with @WalkerAmerica this morning about how to avoid mind viruses in the collective consciousness 🧠
BITCOIN IS WRITTEN IN THE STARS | ERIN REDWING on THE Bitcoin Podcast xitter.cf/i/broadcasts/1dGYlawwX…
Bitconstruct retweeted
It's not fud to be transparent about the realities of what we do IMO.
This place is absolute hell. I love it... If you're reading this you prob love it...
It's still a place where dreams are made... Where $100 can become $1m...
But man most new people are getting tossed straight in the wood chipper 😂.
i don’t think people realize that if we FUD each other to death, especially in front of retail, we’re setting the industry back 10 years
all i see nowadays is:
“this app is for grifters!”
“this protocol is all rugs!”
“this terminal is for scammers!”
you might think this will make your protocol better in comparison, but it doesn’t
all it does in reinforce the world’s belief that crypto is full of scams and bad actors
Bitconstruct retweeted
The most interesting thing about this clip isn’t that it’s AI, it’s that people claim to remember having seen this film when they were little.
Bitconstruct retweeted
Replying to @CNN
This kinda thing just isn’t working for you the way it did before is it
Bitconstruct retweeted
I’m no longer sure what “intellectual property” means when intellect becomes free.






























