Discover the latest news, development and security tips to safeguard your assets with Keystone.


Picture this: A world where managing and protecting your digital assets is a breeze, thanks to a single piece of hardware that flawlessly combines convenience and security. The future of digital asset management has arrived and its name is the [**Keystone 3 Pro**](https://keyst.one/). Consider it your reliable companion in the world of Web3.

Keystone 3 Pro represents a perfect blend of innovation and dependability, setting new industry standards for securing digital assets in cold storage. Crafted with an emphasis on user experience and paramount safety measures, this new hardware wallet is a league of its own.

Keystone 3 Pro, priced at **USD$149**, offers a balanced blend of user accessibility and sophisticated functionality. It excels due to its remarkable combination of top-notch hardware, software, innovative security measures, and dedication to open-source principles, making it an unbeatable choice for those who prioritize their crypto asset’s safety.

Let’s dive into the capabilities of KS3 and discover how it can help you in securing your digital assets.

![](https://keyst.one/images/1_V_Ho4g_RQN_5_Lhm8f_Bncjc_Yw_a8c682131f.webp)

Sporting a sizable 4-inch touch screen, the Keystone 3 Pro offers not just a visually pleasing device but significantly enhances usability by providing an intuitive user interface. The sizeable display helps users to combat [**blind signing**](https://blog.keyst.one/blind-signing-a-security-black-hole-for-the-ethereum-community-13f909b848b6) by allowing them to meticulously review their transaction details prior to approval, thereby avoiding the inadvertent authorization of malicious transactions.

![](https://keyst.one/images/1kul_W_Rw_Rm_Eit_Cq_Qjy2t_P1x_Q_4f17a4c4aa.webp)

Keystone 3 Pro will continue to support QR code transactions, streamlining the process of sending and receiving crypto. However, in response to some users experiencing challenges with their cameras not accurately recognizing QR codes, and not requiring the enhanced security associated with QR codes, we are incorporating a USB port into the device.

This feature will allow users to utilize a USB connection to interact with software wallets like [**MetaMask**](https://metamask.io/) to authenticate transactions. Additionally, [**firmware updates**](https://keyst.one/firmware) can be implemented through the same USB connection.

![](https://keyst.one/images/1u_RFA_1hb_M1_G_Qd_j_Ut_Hgow_681e309940.webp)

To prevent password leakage, the Keystone 3 Pro has a built-in fingerprint signature authentication feature, adding an extra level of security and ensuring that only authorized users can access the device.

![](https://keyst.one/images/1_Dx7_W_Bn4xp_C_4_D_Q_Ms_A_Kbvw_3541f692ed.webp)

Keystone 3 Pro is currently the **ONLY** hardware wallet that incorporates the use of [**three distinct secure elements**](https://blog.keyst.one/secure-elements-the-bedrock-of-hardware-wallet-security-1dd8cbdef461): the [**Microchip ATECC608B**](https://ww1.microchip.com/downloads/en/DeviceDoc/ATECC608B-CryptoAuthentication-Device-Summary-Data-Sheet-DS40002239A.pdf), [**Maxim DS28S60**](https://www.analog.com/en/products/ds28s60.html#product-evaluationkit), and [**Maxim MAX32520**](https://www.engineersgarage.com/maxim-integrated-unveils-the-max32520-worlds-most-secure-iot-microcontroller/) offering a level of security that is unmatched. Each secure element has a unique role in reinforcing the hardware wallet’s security, collectively ensuring the protection of recovery phrases and biometric data of users.

**Microchip ATECC608B** and **Maxim DS28S60** are specifically engineered to safeguard recovery phrases. They collaboratively produce a secure environment for recovery phrase storage, with the ATECC608B providing hardware-level security and authorization, and the DS28S60 ensuring a trusted platform module is always in place.

The **Maxim MAX32520**, on the other hand, is a secure microcontroller unit that plays a vital role in securing fingerprint data. It utilizes encrypted flash storage for safeguarding a user’s fingerprint data, with the verification process being executed securely within the MCU (only available in the Keystone 3 Pro)

![](https://keyst.one/images/1_K_Wi_Xds8t_Q_Znwwhltd_Inz_BQ_7f192cea3e.webp)

Secret recovery phrases serve as the fundamental pillar of crypto security. [**Each Keystone 3 Pro has the capacity to accommodate up to three distinct recovery phrases, each secured by different passwords**](https://blog.keyst.one/unleashing-the-power-of-multiple-secret-recovery-phrases-with-keystone-3-a-comprehensive-guide-3c3afb997cc4), thereby enabling users to oversee multiple crypto accounts from a single hardware wallet. **Transitioning between wallets is a breeze, requiring only the respective password inputs.** This feature amplifies the device’s adaptability and user-friendly nature. Additionally, it also enables users to easily create a new wallet for multi-signature transactions without the need for an extra hardware wallet. This boosts operational efficiency without compromising the safety and integrity of their digital assets.

In the unfortunate scenario of a “[**$5 wrench attack**](https://cointelegraph.com/news/5-wrench-attacks-appear-to-be-on-the-rise-in-the-crypto-community)” where you are coerced into disclosing your recovery phrase, you can fool an attacker into assuming that another wallet is your primary one. Instead of using your primary recovery phrase, you would enter a different one to unlock a decoy wallet, thereby ensuring the majority of your assets remain secure.

![](https://keyst.one/images/1bj_GHN_O_Qswo_Yt9_KP_3hw_e2276bc89c.webp)

[**Built on the principles of openness and transparency**](https://blog.keyst.one/keystone-product-design-principles-cd833bc11125), Keystone incorporates open-source firmware and hardware, making it possible for anyone to scrutinize, validate, and contribute to its evolution.

![](https://keyst.one/images/1_Jzi_Kxu9_Zlbg6_Vqtg_A9_e_Q_0a75a42627.webp)

Marking a first in the hardware wallet industry, the Keystone 3 Pro incorporates a [**PCI**](https://www.pcisecuritystandards.org/)-grade anti-tampering feature, with an intricate ‘security house’ of circuitry encompassing the core IC and SE chips. Any physical tampering results in an immediate data wipeout, further strengthening the device’s resilience.

![13fXyFXmU9g-I99rxUp_lzQ.webp](https://keyst.one/images/13f_Xy_F_Xm_U9g_I99rx_Up_lz_Q_543d047515.webp)

Keystone 3 Pro operates on a customized embedded system designed and fully built by the Keystone team. The system creates a compact, task-specific environment that greatly reduces potential attack vectors and enhances both the hardware and software security. This stand-alone system doesn’t interact with any network, making it secure and simple to update and maintain.

Another aspect of the embedded system is that it’s programmed predominantly in [**Rust**](https://www.rust-lang.org/) — a programming language renowned for its emphasis on reducing bugs. Rust accomplishes this through the utilization of a static typing system. This feature of Rust helps to avert a multitude of errors that could potentially result in runtime issues in other programming languages.

![](https://keyst.one/images/1k_Nvv3nq_C4c6_Xa_Wdm_NGS_Dy_Q_3f1dbfa0c8.webp)
Keystone 3 Pro also comes with an exceptional characteristic — a customizable backplate. This enables users to personalize their Keystone with their favorite image, adding a one-of-a-kind personal flair to their device. However, owing to limitations in the supply chain, this novel characteristic is presently only available to key members and contributors of the Keystone community. Our goal is to make this attribute available to all users by the coming year, 2024.

![](https://keyst.one/images/1_M_Vfv_Y_5m_Y37o_Ix_V5qj_F_Btg_d3a19c864e.webp)

Lastly, the Keystone 3 Pro is loaded with state-of-the-art features. It’s compatible with various Software Wallets’ Derivation Path and supports the [**SLIP-39 Shamir’s Secret Sharing scheme**](https://medium.com/r?url=https%3A%2F%2Fblog.keyst.one%2Fwhy-keystone-implemented-shamir-backups-71e319f972a6). It also streamlines the process of setting up a passphrase, providing an additional layer of security beyond the standard 24-word recovery phrase. Furthermore, it also features multi-signature functionalities and the ability to use a [**dice to generate the secret recovery phrase**](https://blog.keyst.one/how-to-verify-the-recovery-phrase-created-by-dice-rolling-af01c16b765e), thereby enhancing its array of robust features.

Don’t settle for less — trust the Keystone 3 Pro to safeguard your digital assets effectively! [**Join the waitlist today**](https://twitter.com/KeystoneWallet/status/1677260351489048577?s=20)!

<blockquote class="twitter-tweet" data-media-max-width="560"><p lang="en" dir="ltr">???? We&#39;re opening the waitlist for Keystone 3!<br><br>???? Want to be the first to get your hands on Keystone 3 at a discounted price? Here&#39;s what you need to do:<br><br>???? Tweet why you&#39;re looking forward to the launch of Keystone 3 &amp; include the hashtag <a href="https://twitter.com/hashtag/Keystone3Waitlist?src=hash&amp;ref_src=twsrc%5Etfw">#Keystone3Waitlist</a> in your tweet <a href="https://t.co/FFxblTlwgK">pic.twitter.com/FFxblTlwgK</a></p>&mdash; Keystone Hardware Wallet (@KeystoneWallet) <a href="https://twitter.com/KeystoneWallet/status/1677260351489048577?ref_src=twsrc%5Etfw">July 7, 2023</a></blockquote> <script async src="https://platform.twitter.com/widgets.js" charset="utf-8"></script>


hardware wallet with a screen.jpg

Keystone 3 Pro: The Ultimate Protector of Your Digital Assets

When it comes to choosing a cryptocurrency wallet, the options can be overwhelming, especially for beginners. With so many different types of wallets offering various features, it can be tricky to know which one is best suited for your needs. But don’t worry! We’re here to break it down in a simple way.

At its core, every crypto wallet does the same thing: it stores your private keys and gives you an interface to manage your crypto assets. However, the key difference lies in where these wallets store your private keys and how secure they are.

So, how do you choose the right wallet for your needs? Before choosing a wallet, ask yourself these questions:

1. Does it offer self-custody?
2. Is it Secure?
3. Does it support Multiple Networks?
4. Does It Support Different Asset Types?
5. What Type of Wallet is Best for Security?
6. What About Multisig Wallets?

Let’s dive into the key factors you should consider before picking a wallet.
# 1. Does It Offer Self-Custody?

When choosing a wallet, it's important to know who controls your crypto. **Self-custody wallets**, like [Keystone](https://keyst.one/), let you take full control of your private keys, which means **you** own and manage your crypto directly. You’re in charge of its security, and no one else can access it. On the other hand, **custodial wallets** are managed by third parties, like exchanges. In these wallets, they hold your private keys, which means they technically own your crypto and you’re trusting them with your assets. If you value security and control, self-custody wallets are the best choice because **you** remain in control.

# 2. Is It Secure?

Security is a top priority when it comes to storing your cryptocurrency. The level of security largely depends on where and how the wallet stores your private keys. For instance, software wallets store private keys on devices connected to the internet, which can be vulnerable to hacks. Hardware wallets take a different approach by keeping your private keys offline, significantly reducing the risk of remote hacks.

# 3. Does It Support Multiple Networks?

Not all wallets work with multiple blockchain networks. Some wallets are limited to just one network, meaning you’ll need separate wallets for different types of assets, like Bitcoin and Ethereum. 

# 4. Does It Support Different Asset Types?

Within the same blockchain network, wallets can differ in terms of the assets they support. Some wallets may only handle coins, while others can manage tokens and NFTs as well. Keystone supports a wide range of digital assets, from Bitcoin to NFTs, ensuring flexibility in managing your crypto portfolio.

![What is cold wallet? Hot wallet vs Cold wallet](https://keyst.one/images/How_to_Safeguard_Your_Crypto_Assets_441e8d9a2e.jpg)

# 5. What Type of Wallet is Best for Security?

## Hardware vs. Software Wallets

Software wallets are popular for their convenience and ease of use. However, they come with risks, as your private keys are stored on devices connected to the internet, making them more susceptible to hacks. Hardware wallets, on the other hand, provide a much safer option by storing private keys offline. [Keystone 3 pro](https://keyst.one/shop/products/keystone-3-pro), for example, combines the security of a hardware wallet with user-friendly features like a large touchscreen and compatibility with popular software wallets like MetaMask.

# 6. What About Multisig Wallets?

For those who want extra security or need to share control of an account, multisignature (multisig) wallets can be a good solution. Multisig wallets require multiple signatures to approve a transaction, which can protect your assets if one key is compromised. 

# Conclusion

Choosing the right crypto wallet depends on your specific needs—whether it’s security, asset type support, or ease of use. For those who prioritize security and control over their assets, hardware wallets like Keystone are the best option. Keystone offers a range of advanced features, from secure elements to seamless QR code transactions, making it the perfect companion for both beginners and seasoned crypto users.

sparkling_seahorse_84827_give_me_a_image_about_cryptocurrency_s_e9d4e8a8-4c56-4d18-8468-036c908a96e7.png

 How To Choose a Crypto Wallet？

# Key Takeaways
- Air-gapped wallets offer maximum security for cryptocurrency storage by staying completely offline.
- These wallets work by signing transactions without ever connecting to the internet.
- There are three main types: hardware wallets, computer wallets, and smartphone wallets.
- Benefits include complete control, enhanced privacy, and improved security.
- Drawbacks include setup complexity and the responsibility of safeguarding your own private keys.
- Air-gapped wallets are ideal for experienced users prioritizing security, but beginners may want to start with simpler options.


![hardware wallet with a screen-1.jpg](https://keyst.one/images/hardware_wallet_with_a_screen_1_4438485772.jpg)

In today's digital world, protecting your cryptocurrency is more important than ever. Air-gapped wallets offer a highly secure offline solution. Let's explore what makes them so secure and how they work.
# What Are Air-Gapped Crypto Wallets?

An air-gapped crypto wallet, such as [Keystone](https://keyst.one/), is completely disconnected from the internet and other networks. It doesn't use Wi-Fi, Bluetooth, or even USB connections. Think of it as a secure vault that's not connected to any outside systems. This isolation helps protect your digital money from online threats like hacking and viruses.

# How Do Air-Gapped Wallets Work?
Air-gapped wallets let you securely approve transactions without connecting to the internet. Here's a simplified process:
- Create a transaction request on your online wallet.
- Transfer this request to your air-gapped wallet using a QR code or memory card.
- The air-gapped wallet signs (approves) the transaction securely.
- Transfer the approved transaction back to your online wallet.
- The online wallet sends the transaction to the blockchain network.

This process keeps your private keys (like a secret password) safe and offline at all times.
# Types of Air-Gapped Wallets
There are three main types of air-gapped wallets:

**Hardware wallets**: Devices like Keystone are specifically designed to store cryptocurrency offline. They have screens and buttons for managing transactions securely.
**Computer wallets**: A personal computer can be used as an air-gapped wallet if it's permanently disconnected from the internet. You transfer transactions using physical media like SD cards.
**Smartphone wallets**: You can turn a smartphone into an air-gapped wallet by resetting it, never connecting it to the internet, and installing wallet software via a memory card.

# Benefits and Drawbacks of Air-Gapped Wallets
## Pros:

**Complete control:** You, and only you, have access to your cryptocurrency.
**Enhanced privacy:** You can manage your cryptocurrency without sharing personal information.
**Improved security: **Being offline significantly reduces the risk of hacking or phishing attacks.

## Cons:

**Not 100% foolproof:** While very secure, there's still a brief moment of vulnerability when transferring transaction data.
**Setup complexity:** Setting up an air-gapped wallet can be challenging for beginners.
**Responsibility**: You're in charge of keeping your access information (private keys) safe. If you lose this, you might lose access to your funds.

![pro and cons of airgapped wallet](https://keyst.one/images/sparkling_seahorse_84827_I_want_a_image_shows_the_contrast_of_p_b7d5c28a_a7d0_4e65_89f9_0790beae5603_d834e46a2f.png)

# Are Air-Gapped Wallets Right for You?

Air-gapped wallets offer top-level security for storing cryptocurrency, especially for long-term savings. However, they require some technical know-how to set up and use. If you're new to cryptocurrency, you might want to start with simpler options and gradually learn about more secure methods like air-gapped wallets. For those who prioritize security and are comfortable with technology, air-gapped wallets are an excellent choice. 

# Getting Started with Air-Gapped Wallets
If you're interested in trying an air-gapped wallet, here are some basic steps:

- Research different air-gapped wallet options and choose one that fits your needs.
- Purchase the hardware wallet from a reputable source.
- Follow the manufacturer's instructions carefully to set up your wallet.
- Learn how to create and sign transactions using your new air-gapped wallet.
- Practice with small amounts before storing large sums of cryptocurrency.

Remember, the key to using air-gapped wallets safely is understanding how they work and following security best practices.

By using an air-gapped wallet like [Keystone 3 pro](https://keyst.one/shop/products/keystone-3-pro), you're taking a significant step in securing your digital assets in an increasingly risky online world. While they may seem complex at first, the added security is well worth the learning curve for many cryptocurrency users.

sparkling_seahorse_84827_give_a_image_for_crypto_security_make__66d624e2-915c-419e-876a-169902620841.png

What is Air-gapped crypto wallet? Why Air-gapped?

If you’re new to the world of cryptocurrencies, one of the most important things to understand is crypto wallets. These wallets are essential for securing your digital assets and making sure your crypto journey is safe and smooth. Don’t worry—we’ll break it down in a simple, straightforward way so you can get started with confidence.

# **What Is a Crypto Wallet?**

A crypto wallet isn’t like a regular wallet where you store cash. Instead, think of it as your gateway to the blockchain. While it doesn’t physically hold your cryptocurrencies, it’s a tool that allows you to:

•	Send and receive digital assets

•	Manage and keep track of your cryptocurrencies

•	Access various blockchain applications like decentralized finance (DeFi) or NFTs

Most importantly, a crypto wallet keeps your private keys safe. These keys are like the password to your digital assets. Without them, you wouldn’t be able to access your crypto, which is why keeping them secure is absolutely essential.

# **Why Do You Need One?**

Imagine having a fortune in crypto but no way to access it. That’s essentially what happens if you don’t have a wallet to manage your assets. A crypto wallet ensures that you can securely manage, send, and receive your digital assets, anytime, anywhere. Without a secure wallet, your crypto could be vulnerable to theft or loss.

# **How Do Crypto Wallets Work?**

Most modern wallets use something called Hierarchical Deterministic (HD) technology. This may sound technical, but it’s designed to make managing your crypto easier. Here’s how it works:

•	You have one master key, which is often referred to as a secret recovery phrase. This phrase is a series of 12-24 words that can restore all of your crypto accounts if needed.

•	From this one wallet, you can generate and manage multiple blockchain accounts, each with its own private key.

•	If you ever lose your wallet or access to it, you can recover everything using your secret recovery phrase.

When you make a transaction, your wallet securely signs it using your private key and then sends it to the blockchain for processing. With wallets like **[Keystone](https://keyst.one/)**, which uses QR code-based transactions, you can ensure that your private keys never touch the internet, providing an extra layer of security.

![1__izprrXiywVkSAEwDpJ__jQw.webp](https://keyst.one/images/1_izprr_Xiyw_Vk_SA_Ew_Dp_J_j_Qw_b512800c4e.webp)
# **Types of Wallets: Choose Your Style**

There are different types of wallets, and each serves a different purpose depending on how much control and security you need. Here’s a breakdown:

## **Custodial vs. Non-Custodial Wallets**

•	Custodial Wallets: These are managed by a third party, usually an exchange like Binance or Coinbase. They hold your private keys for you, making it convenient if you’re new to crypto. However, you don’t have full control over your assets because someone else has the keys. If the exchange is hacked or shuts down, your crypto could be at risk.

•	Non-Custodial Wallets: With a non-custodial wallet, you are in full control. You hold your own private keys, which means you have complete ownership and control over your digital assets. This is the most secure option for those who want full autonomy, and it’s what Keystone offers. Non-custodial wallets give you more responsibility, but they also provide peace of mind knowing that no one else can access your crypto.

## **Hot Wallets vs. Cold Wallets**

### **Hot Wallets:**

•	Software Wallets: These are apps that you install on your smartphone, desktop, or web browser. They are very convenient for day-to-day use and interacting with decentralized apps (dApps). However, since they are connected to the internet, they are vulnerable to malware, hacking, and phishing attacks. Software wallets are great for holding smaller amounts of crypto that you plan to use regularly.

•	Mobile Wallets: These are software wallets specifically designed for smartphones. They allow you to manage your crypto on the go, but they share the same security vulnerabilities as other software wallets. Examples include Trust Wallet or MetaMask.

•	Desktop Wallets: These are installed on your desktop or laptop. They provide a little more security compared to mobile wallets since they are less likely to be exposed to multiple Wi-Fi networks or NFC. However, they’re still online, which means they’re not as secure as cold wallets. Electrum and Exodus are popular examples.

### **Cold Wallets:**

•	Hardware Wallets: These are physical devices, like the [Keystone 3 Pro](https://keyst.one/shop/products/keystone-3-pro), that store your private keys offline. Because they are never connected to the internet, they are immune to online attacks, making them the most secure option for storing large amounts of crypto or for long-term holding. Keystone hardware wallets also use QR codes for secure data transmission, meaning your keys stay air-gapped and fully protected from cyber threats.

•	Paper Wallets: This is one of the most basic forms of cold storage. A paper wallet simply prints your private and public keys on a piece of paper, often as QR codes. While this method keeps your keys completely offline, it has several downsides. Paper wallets can be easily lost, damaged, or destroyed, and they aren’t very practical for people who want to transact regularly. Paper wallets were more common in the early days of Bitcoin but are less useful today.

### **Multi-Signature Wallets: Extra Security**

For those looking for an added layer of protection, multi-signature wallets (or multisig) are a great option. These wallets require multiple private keys to authorize a transaction, which makes it much harder for a hacker to gain access. For example, you could require two out of three private keys to approve any transaction, and each key could be stored in a different location for added security. Keystone offers [multisig functionality,](https://blog.keyst.one/exploring-the-power-of-multi-signature-wallets-with-keystone[Link](link)) giving you the ability to manage several keys for greater security.

![1GpzhF-tz1r9tbOb1ZEzM3g.webp](https://keyst.one/images/1_Gpzh_F_tz1r9tb_Ob1_Z_Ez_M3g_e97e36fc3a.webp)

#** Choosing the Right Wallet**

When selecting a wallet, the most important factor is security. Hardware wallets, like the Keystone 3 Pro, are widely regarded as the most secure because they store your private keys offline. Here’s why Keystone hardware wallets stand out:

•	They use three secure elements, which provide an unmatched level of protection for your private keys and biometric data.

•	They are designed to be user-friendly, so even if you’re not tech-savvy, you can easily manage your assets.

•	Most importantly, they give you full control over your assets. No third party can access your funds, ensuring maximum security.

# **Your Crypto Journey Starts Here**

In the world of crypto, your financial security is in your hands. Choosing the right wallet is one of the most important steps you’ll take on your journey. With [Keystone](https://keyst.one/), you’re not just storing your crypto—you’re ensuring that your assets are secure and that you’re fully in control of your financial future.

Are you ready to take charge of your digital assets? Your adventure with Keystone starts now—let’s keep your crypto safe, secure, and fully under your control.

Keystone’s Bitcoin-only firmwares

Understanding Crypto Wallets: A Guide for Beginners

In the evolving landscape of cryptocurrency, safeguarding digital assets has never been more critical. Cold wallets, AKA hardware wallet, often referred to as the safest method of storing crypto, play a vital role in this protection by keeping your assets offline and away from online threats. At [Keystone](https://keyst.one/), we have redefined what it means to secure digital wealth by incorporating cutting-edge security features and user-centric design in our cold wallets, particularly with our [Keystone 3 Pro](https://keyst.one/shop/products/keystone-3-pro). This article explores how cold wallets function, their benefits, and the specific innovations Keystone brings to the table.
# Hot vs. Cold Wallets: Understanding the Basics
Cryptocurrency wallets generally fall into two categories: hot wallets and cold wallets. Hot wallets are always connected to the internet, providing quick access to your funds but at the cost of higher vulnerability to cyber threats. Cold wallets, on the other hand, store your digital assets offline, creating a secure environment that is much harder for hackers to penetrate.

Keystone takes this concept a step further. Our Keystone 3 Pro cold wallet offers not just offline storage but also implements an embedded system fortified by [three independent secure element chips](https://blog.keyst.one/secure-elements-the-bedrock-of-hardware-wallet-security-1dd8cbdef461), setting a new standard in cold storage security.

![Element security chips](https://keyst.one/images/Hardware_Wallet_with_Secure_Chips_005afdc698.jpg)

# Why Keystone's Cold Wallet?
Choosing a cold wallet is about prioritizing security, and with Keystone, you are choosing a solution that doesn't compromise on convenience or safety. Think of Keystone 3 Pro as a vault for your digital assets, designed to protect against unauthorized access, cyber theft, and even physical tampering.

What sets Keystone apart is our emphasis on eliminating single points of failure. By supporting multiple recovery phrases and integrating robust QR code data transmission, Keystone ensures that your assets remain secure even in the face of sophisticated attacks.

![What is cold wallet? Hot wallet vs Cold wallet](https://keyst.one/images/How_to_Safeguard_Your_Crypto_Assets_441e8d9a2e.jpg)

## The Mechanics of Keystone Cold Wallets
At the heart of Keystone's cold wallet technology is the concept of air-gapped security. Keystone 3 Pro operates completely offline, generating and storing private keys in a secure environment that is isolated from the internet. This physical isolation is enhanced by the use of QR codes and Micro SD cards for data transfer, ensuring that your keys are never exposed online.

Furthermore, Keystone's cold wallets are embedded with three distinct secure elements—each playing a unique role in protecting your recovery phrases and biometric data. This multi-layered approach makes it nearly impossible for unauthorized parties to access your funds.
## Advantages of Choosing Keystone's Cold Wallet

- **Enhanced Security**: By operating offline and utilizing three secure elements, Keystone 3 Pro is virtually immune to online hacking attempts.
- **Complete Control**: You have full control over your private keys and recovery phrases, ensuring that your assets remain entirely under your management.
- **Defense Against Physical and Cyber Threats**: Whether it's cyber threats or physical tampering, Keystone's cold wallet is equipped to defend your assets from a wide range of attacks.
- **Optimized for Long-Term Storage**: Keystone 3 Pro is designed for those who value long-term security, making it ideal for institutional investors and individuals with significant crypto holdings.
# Addressing the Challenges of Cold Wallets
While cold wallets offer unparalleled security, they are not without challenges. Physical damage or loss is a genuine concern, which is why Keystone emphasizes the importance of robust backup strategies. The Keystone 3 Pro allows you to manage multiple recovery phrases, making it easier to recover your assets if your device is lost or compromised.

Another aspect to consider is the balance between security and convenience. Cold wallets, by nature, require more steps to access funds compared to hot wallets. However, Keystone has streamlined this process with a user-friendly interface and support for QR code transactions, making it easier to manage your assets without sacrificing security.
## Why Keystone's Cold Wallet is the Future of Secure Storage
The Keystone 3 Pro is more than just a cold wallet; it's a comprehensive security solution. With innovations like anti-tampering features, customizable passphrases, and support for multi-signature transactions, Keystone is leading the way in providing a secure and user-friendly experience.

Whether you're a long-term holder or an active participant in the crypto space, Keystone's cold wallet offers the protection and peace of mind you need to manage your digital assets effectively. By combining cutting-edge security with unparalleled usability, Keystone 3 Pro ensures that your assets remain secure in a world where threats are constantly evolving.

How to Safeguard Your Crypto Assets.jpg

What is a Cold Wallet? A Deep Dive into Keystone’s Approach to Cryptocurrency Cold Storage


We’re thrilled to announce a promising partnership with [Offside Labs](https://twitter.com/Offside_Labs), a leading security research firm renowned for its exceptional expertise and unwavering vigilance. Together, we’re set to redefine the boundaries of digital security for Keystone.

### [Who are Offside Labs](https://offside.io/)?

You might be wondering, “Who exactly are these security maestros?” 
Here are Offside Labs' remarkable achievements, making them an unparalleled ally in our quest for impenetrable security.

* **Innovation Pioneers**They have Top-tier experts from the famous PanguTeam, who achieved the unprecedented feat of [publically remote jailbreaking the iPhone 13 Pro](https://sparrowsnews.com/2021/10/18/iphone-13-pro-jailbreak-done-remotely/#google_vignette).

* **Champions of Security** Their dominance in every security contest, including clinching the [Paradigm CTF 2023 championship](https://twitter.com/Offside_Labs/status/1719083963376177248), is a testament to their unmatched skill.

* **Blockchain Protectors** Their advanced research techniques earned three spots out of ten in the “[Blockchain Hacking Techniques of 2022](https://www.openzeppelin.com/security-audits/top-hacking-techniques-2022)”, showcasing their prowess in safeguarding digital assets.

* **Cybersecurity experts**They have bagged over $8M+ in bug bounties by safeguarding assets over $300M+ in value.
![Top-tier security experts team at your service  Top-tier security experts team at your service.jpeg](https://keyst.one/images/Top_tier_security_experts_team_at_your_service_Top_tier_security_experts_team_at_your_service_474105eba2.jpeg)

### Keystone and Offside Labs: A Partnership of Excellence

Recently, Offside Labs conducted a thorough review of Keystone 3 Pro and detected a hidden vulnerability in our firmware. Thanks for their timely intervention, which helped us to identify and effectively neutralise it in our V-1. 2. 8 firmware update. We encourage all our users to upgrade to the latest firmware for enhanced protection.

Recognising their exceptional work, we quickly offered a bounty and extended our heartfelt gratitude. Impressed by their meticulous approach and commitment to perfection, we knew we had to deepen our collaboration with Offside Labs. This partnership clearly reflects our unwavering commitment to security and is a testament to the power of collective effort within the community.

### A Secure Future with Keystone and Offside Labs

We are confident that the expertise and experience of Offside Labs will significantly bolster the security of Keystone, ensuring the utmost protection of your digital assets. Our collaboration symbolises a shared vision of uncompromised security and trust.

In our continued pursuit of transparency and safety, we’ve always stood by the web3 ethos and embraced open-source by publishing everything from the [Secure Element firmware to the bill of material of hardware components](https://github.com/KeystoneHQ/keystone3-firmware). We have also open-sourced the audit reports from [SlowMist](https://github.com/slowmist/Knowledge-Base/blob/master/open-report-V2/blockchain-application/SlowMist%20Audit%20Report%20-%20Keystone3_en-us.pdf) and [Keylabs](https://github.com/keylabsio/audits) to provide complete transparency on our efforts to make a secure product for our users.

By open-sourcing our product, we enable security experts like Offside Labs to assist us more effectively in identifying, rectifying, and enhancing our systems. This helps us leverage the collaborative efforts of the best minds in the industry to fine-tune our product and provide unmatched security advantages to our deserving users. With your unwavering support, our journey towards unrivalled digital asset security continues stronger than ever!

### About Keystone

[Keystone](https://keyst.one/) is an [open-source](https://blog.keyst.one/the-role-of-open-source-tech-in-keystones-development-4dd77faea752) airgap hardware wallet that utilises an embedded system. Our devices are equipped with three secure element chips to enhance their security further. One of Keystone’s unique features is its ability to support [multiple recovery seed phrases](https://blog.keyst.one/unleashing-the-power-of-multiple-secret-recovery-phrases-with-keystone-3-a-comprehensive-guide-3c3afb997cc4), reducing the need to purchase multiple hardware wallet devices.


Keystone Offside Labs.png

Keystone x Offside Labs: Redefining the Hardware Wallet Security

Recently, a disturbing scam incident on the Solana blockchain caught our attention and prompted us to share this crucial narrative. Imagine losing millions in a phishing attack—a scenario that seems almost too dreadful to comprehend. Yet, this is precisely what happened to an unsuspecting user, and his ordeal could radically change your perspective on online security.

It all began with a seemingly benign click on a malicious link below a crypto project’s tweet. This action led the user to a phishing site, setting off a chain of events that locked his funds irretrievably in his wallet. This incident illustrates a stark reality: losing control of your digital assets can happen swiftly and silently.

For those familiar with Ethereum Virtual Machine (EVM) chains, such an event might seem puzzling. Solana operates under a different mechanism, one that, if approached with EVM habits, poses significant risks. Understanding these distinctions is crucial for anyone navigating the Solana ecosystem.

![SVM vs EVM](https://keyst.one/images/download_011ac9f85c.png)

## Understanding Solana’s Unique Security Challenges

To assist new Solana users and seasoned veterans alike, we've detailed some of the most prevalent attack vectors on this blockchain. Recognising these can be the key to safeguarding your digital treasures.

### 1. Token Account Ownership Transfer
    
One of Solana's foundational features is the concept of separate token accounts, akin to having individual bank accounts for different types of currency within your digital wallet. Normally, you, the wallet owner, control these accounts. However, attackers can exploit this by using a command called "createSetAuthorityInstruction" , which reassigns the ownership of these token accounts. 
   
![Transaction error](https://keyst.one/images/Untitled_32107707a8.png)
    
Once the attackers gain control, they can lock you out, leaving your tokens in place but inaccessible, much like having money in a bank account without the ability to withdraw it. This attack doesn't just steal tokens; it transfers ownership, making recovery exceptionally challenging. Alerts from wallets like Phantom and Backpack can sometimes prevent such mishaps, but only if the user diligently verifies and double-checks every transaction before approval.
    
### 2. Direct Authorization Not Required
Solana’s operational model does not require the user to authorise each token contract individually before transactions can proceed. Instead, transaction approval is a one-step process where once you approve a transaction, it is executed immediately. This differs significantly from EVM platforms, where each contract interaction requires a separate authorisation. This means if you inadvertently approve a malicious transaction on Solana, all associated actions are processed instantly, leading to immediate and potentially irrecoverable losses. The simplicity of Solana's transaction approval can thus be a double-edged sword, facilitating user experience but also increasing risk if misused.

### 3. Multiple Token Transfers in a Single Transaction
Solana’s ability to handle multiple sub-transactions within a single transaction framework is designed for user convenience, allowing for efficient batch processing of transactions. However, this feature is also susceptible to abuse. Hackers can construct a transaction that, on the surface, appears benign but contains several hidden instructions aimed at draining multiple assets from your wallet. 
    
![Bulk transaction](https://keyst.one/images/Untitled_1_cae0e74b92.png)
    
For example, a single approved transaction could apparently redeem small-value tokens while transferring high-value assets like SOL or NFTs. The apparent simplicity and benignity of such transactions can deceive users into approving large-scale thefts.
    
### 4. Fraudulent Transaction Signatures
The 'Durable Nonce' feature in Solana mirrors the 'PERMIT' signature used in EVMs but with a potentially more deceptive twist. By signing a transaction with a Durable Nonce, users might not see immediate changes in their wallets, leading to a false sense of security. Attackers exploit this by waiting to execute the transaction until they can do the most damage, often after modifying the underlying contract to include malicious code. 
    
This upgraded attack method is particularly covert, as it can occur days or weeks after the initial interaction, bypassing the usual cues that alert users to unauthorised activity. Therefore, it is still necessary to raise awareness of prevention, not rely too much on the wallet software reminders and blindly trust the results of the transaction simulation.
    

## Keystone Advantage in Combating Phishing Scams

Keystone’s hardware wallets offer a crucial layer of security in this high-stakes environment. By requiring physical confirmation for every transaction, Keystone wallets ensure that users have a tangible moment to verify and reflect on the transaction details. This additional step is vital in preventing the quick, impulse decisions that often lead to phishing successes. Moreover, our hardware wallets independently parse and decode transaction details, providing a critical backup verification mechanism that remains reliable even when software simulations fail.

![Verify your transaction on Keystone](https://keyst.one/images/i_Screen_Shoter_Brave_Browser_240718122416_a6ba70a5ac.jpg)

## Ongoing Battle Against Digital Threats

The blockchain is dynamic and ever-changing, but so are the tactics of those who wish to exploit its vulnerabilities. As phishing techniques become more sophisticated, the need for comprehensive security strategies becomes more critical. On the eve of writing this article, Solana released two new features, Action and Blink. While we have unlimited thoughts about these two features, some people have warned that phishing groups may use the new features to cheat.

Educating yourself about the specific features and potential vulnerabilities of the blockchain you are using is imperative. For Solana users, understanding and anticipating the unique challenges discussed can significantly enhance security. Always scrutinise transactions closely, utilise the tools at your disposal, and remember that when it comes to security, vigilance is your best defence.

By combining informed caution with advanced security tools like Keystone's hardware wallets, users can protect themselves against evolving threats in the cryptocurrency world. Remember, the goal is not just to survive in this digital ecosystem but to thrive securely and confidently.

EN draft - Solana Blog.jpg

Your EVM Security Habits Won't Help on Solana: Understand the Logic and Avoid Phishing Attacks

It's no secret that [TON](https://ton.org/), aka The Open Network—a public blockchain deeply bound to Telegram—has been making waves among the crypto community and attracting many users who want to gain an edge over others by investing in its new projects. Like the ecological pyramid, the scammers follow these innocent users to prey on them, like sharks follow the blood trail of their prey!

## Challenges and suggestions:

As a user, you cannot follow the same security habits that kept you safe in the EVM due to the differences in technical characteristics between EVM and TON blockchain. 

As a leading hardware wallet provider active in the TON ecosystem, we have compiled 4 security suggestions to help you navigate this space safely.

1. Choosing the right wallet
2. Protect yourself against common forms of phishing
3. Identifying fraudulent phishing with the blockchain browser
4. Using a hardware wallet for further security

Let’s understand these security suggestions one by one with detailed examples and guidance that you can follow at once:

### 1. Choosing the right wallet:

Due to the technical differences, the regular EVM wallets we use, such as MetaMask and Rabby, do not currently support TON. So, we need to install another wallet that does.

When it comes to choosing a wallet to secure your asset, you should evaluate the wallets based on certain aspects, such as:

- Open-sourced, 
- Security features,
- Ability to connect Hardware wallet, 
- Attention to analysing the transaction details, etc. 

To give you a head start, we have done some basic research to make your job easier!  

Imagine you are on a TON phishing site, and the hacker wants to drain some assets from your wallet with a fake airdrop transaction.  

We took two TON wallets, namely, OpenMask and Tonkeeper, and tried to simulate the transaction on both. 

![OpenMask vs Tonkeeper](https://keyst.one/images/new_b70f9b0d5b.jpeg)

If we start with the [OpenMask](https://www.openmask.app/), It seems like a normal transaction to claim airdrops, right? Now, pause for a second and check the same transaction on the [Tonkeeper](https://tonkeeper.com/). It gives us more information compared to the former and clearly breaks the hacker's trap by revealing that the site is trying to steal the FISH tokens from our wallet. 

Now tell us, which wallet users are more likely to fall for this? 

A secure wallet is like a 'giant magnifying glass' that can effectively reduce users' anxiety about identifying phishing scams. Recently, Keystone also successfully integrated with Tonkeeper, and this addition of a hardware wallet can increase users' security on TON by a tonne.
<blockquote class="twitter-tweet"><p lang="en" dir="ltr">1/<br><br>????️ Exciting news for all the <a href="https://twitter.com/ton_blockchain?ref_src=twsrc%5Etfw">@ton_blockchain</a> fanatics!<br><br>We are thrilled to partner with <a href="https://twitter.com/tonkeeper?ref_src=twsrc%5Etfw">@tonkeeper</a> to bring the power of <a href="https://twitter.com/hashtag/TON?src=hash&amp;ref_src=twsrc%5Etfw">#TON</a> to your hands with our latest firmware update, V - 1.5.0 ⚙️<br><br>Ready to explore what&#39;s new? ???? <a href="https://t.co/PK3e4RJwmU">pic.twitter.com/PK3e4RJwmU</a></p>&mdash; Keystone Hardware Wallet (@KeystoneWallet) <a href="https://twitter.com/KeystoneWallet/status/1803789962154041610?ref_src=twsrc%5Etfw">June 20, 2024</a></blockquote> <script async src="https://platform.twitter.com/widgets.js" charset="utf-8"></script>

### 2. Protect yourself against the common forms of phishing

Like any other public chain, phishing is TON's most common and widely used attack.  Let's learn the various phishing tricks followed by hackers:

#### A) Zero-amount transfer phishing:

Hackers send TON dust to many addresses in bulk and try baiting the receiver by mentioning such as "receive 1000 TON airdrop, visit “[http://xxxxxx.com](https://t.co/fgeNaPBI1N)", etc. in the transaction notes of these transactions. This method is to trick you into visiting their scammy site and stealing your assets by fooling you into signing your own wallet drain transaction.

#### B) NFT Airdrop Phishing

Similar to the earlier method, hackers airdrop NFTs to multiple users' wallets and attach URLs of phishing websites or NFT marketplaces, luring users to sell these airdropped scam NFTs. If you receive such an NFT, do not interact with it because hackers set up these websites to steal assets from your wallets.

<blockquote class="twitter-tweet"><p lang="en" dir="ltr">❗️Be cautious, new scam alert – fake <a href="https://twitter.com/hashtag/NFT?src=hash&amp;ref_src=twsrc%5Etfw">#NFT</a> token distributions to <a href="https://twitter.com/hashtag/TON?src=hash&amp;ref_src=twsrc%5Etfw">#TON</a> wallets.<br><br>Scammers send NFTs with similar numbers to the one in the screenshot, which are priced from $10k on the market.<br><br>In the NFT description, they insert a link to a marketplace, like… <a href="https://t.co/vbpYoe87oD">pic.twitter.com/vbpYoe87oD</a></p>&mdash; Perominar (@Perominar) <a href="https://twitter.com/Perominar/status/1788873552319389792?ref_src=twsrc%5Etfw">May 10, 2024</a></blockquote> <script async src="https://platform.twitter.com/widgets.js" charset="utf-8"></script>

#### C) Beware of TON's unique "comment" feature

Unlike EVM, Ton has an optional comment field on all transfer transactions, similar to the “remarks” column when transferring money from the bank. This user-friendly feature has now become a playground for hackers, who use it to confuse their victims.

![Transaction Comment](https://keyst.one/images/new_2_49f1a59769.png)

As shown in the image above, the hacker tries to manipulate the user by mentioning a fake transaction, "Received +10 227 810 848 43 FISH," in the comment field. But, in reality, the transaction is created to drain the existing FISH token from the victim’s wallet.

 Now, you can understand that any average user will buy into this scam out of curiosity to get the fake airdrop and end up losing his assets.

Reminder: Do not trust any content in the trade message.

To protect our TON users, we are including a safety message under the comments section to alert them before executing the transaction.

![Keystone's safety measure](https://keyst.one/images/5212e081_aa93_40c8_8c6b_0fa1aa967b90_9fbb795cb1.png)

### 3. Identifying fraudulent phishing with the blockchain browser

Similar to Ethereum’s [Etherscan](https://etherscan.io/), the TON blockchain has [Tonscan](https://tonscan.com/) and [Tonviewer](https://tonviewer.com/) to view on-chain information.

![Tonviewer vs Tonscan](https://keyst.one/images/GQ_1_I8gzac_AAEX_Iy_746e63f53a.jpeg)

On comparing these two explorers, Tonviewer does a better job by marking the suspected phishing transactions as "SUSPICIOUS", and the fraudulent airdrop NFTs are labelled as "SCAM" to prevent users from falling into the trap. On the other hand, TONSCAN only displays on-chain information and lacks some security-related tips.

![Scam label on fake airdropped NFTs](https://keyst.one/images/Untitled_4_286b43ca88.png)

### 4. Using a hardware wallet for further security

On any public chain, using a hardware wallet to take the seed phrases off the grid and verify transactions twice is an effective security measure to protect assets.  

Keystone enables TON users to enjoy supreme security by integrating with the TonKeeper wallet. 
For hardware wallet users, we have the following suggestions:  
- Use hardware wallets to save large assets 
- Separate multiple wallets using Keystone's 3 sets of mnemonics to prevent the risk of a single point of failure. 
- Carefully verify the transaction information displayed by Keystone to avoid signature phishing transactions.

## Eager to BUIDL in TON ecosystem:

In the blockchain world, opportunity often goes hand in hand with risk. As you grow with the TON ecosystem, don't forget to protect your assets with our above security suggestions while you continue looking for quality projects to invest in. Being a leading hardware wallet provider, we are willing to contribute to improving the security of the users by closely working with all parties in the TON ecosystem and doing our best to build a secure interaction environment.
<blockquote class="twitter-tweet"><p lang="en" dir="ltr">1/2<br><br>Ensuring user safety on public blockchains is non-negotiable.<br><br>As a leading hardware wallet provider, we&#39;re eager to team up with <a href="https://twitter.com/ton_blockchain?ref_src=twsrc%5Etfw">@ton_blockchain</a> &amp; contribute to improving user safety.<br><br>Let&#39;s make this happen - <a href="https://twitter.com/steveyun_ton?ref_src=twsrc%5Etfw">@steveyun_ton</a>, <a href="https://twitter.com/jbfxdotme?ref_src=twsrc%5Etfw">@jbfxdotme</a>, <a href="https://twitter.com/rogozov?ref_src=twsrc%5Etfw">@rogozov</a>, <a href="https://twitter.com/surnamedanev?ref_src=twsrc%5Etfw">@surnamedanev</a>! <a href="https://t.co/pL0l5ZnnOL">https://t.co/pL0l5ZnnOL</a></p>&mdash; Keystone Hardware Wallet (@KeystoneWallet) <a href="https://twitter.com/KeystoneWallet/status/1806674068923650065?ref_src=twsrc%5Etfw">June 28, 2024</a></blockquote> <script async src="https://platform.twitter.com/widgets.js" charset="utf-8"></script>

Your Go-to Security guide for Ton ecosystem.jpg

New to TON? Consider this your go-to guide to safety in the TON ecosystem

In the rapidly evolving world of cryptocurrency, securing digital assets is of paramount importance. Traditional hardware wallets, often equipped with monochrome screens and physical buttons, have served their purpose but come with limitations in terms of usability and security. Enter the Keystone 3 Pro — a revolutionary step forward in hardware wallet technology that redefines what modern crypto asset management should be.
### The Drawbacks of Traditional Hardware Wallets

Traditional hardware wallets, like those featuring small monochrome screens and two physical buttons, pose several challenges:
![The Drawbacks of Traditional Hardware Wallets.jpg](https://keyst.one/images/The_Drawbacks_of_Traditional_Hardware_Wallets_49329fab5c.jpg)

1. **Limited Usability**: Navigating through a tiny screen and physical buttons can be cumbersome and error-prone, especially for complex transactions.
2. **Risk of Blind Signing**: With small screens, users may not fully see or understand the details of their transactions, increasing the risk of approving malicious transactions.
3. **Lack of Advanced Security Features**: Traditional wallets often lack advanced security measures such as biometric authentication and multiple secure elements.
### Introducing Keystone 3 Pro: The Future of Hardware Wallets

The Keystone 3 Pro addresses these limitations and sets new standards for security and usability in hardware wallets.

### Enhanced Usability with a 4-Inch Touchscreen
![Introducing Keystone 3 Pro_ The Future of Hardware Wallets.jpg](https://keyst.one/images/Introducing_Keystone_3_Pro_The_Future_of_Hardware_Wallets_0ebb1a7059.jpg)

One of the standout features of the Keystone 3 Pro is its large 4-inch touchscreen. This significant upgrade not only enhances the visual appeal but also improves usability by providing an intuitive user interface. Users can easily navigate through their wallets, review transaction details meticulously, and avoid the pitfalls of blind signing.

### Advanced Security Features

Keystone 3 Pro incorporates state-of-the-art security features, ensuring that your digital assets are well-protected:

1. **Triple Secure Elements**: The Keystone 3 Pro is equipped with three distinct secure elements: Microchip ATECC608B, Maxim DS28S60, and Maxim MAX32520. Each chip plays a vital role in safeguarding recovery phrases and biometric data, offering unmatched security.
![Advanced Security Features.jpg](https://keyst.one/images/Advanced_Security_Features_38ecc6d962.jpg)
2. **Biometric Authentication**: To prevent unauthorized access, the Keystone 3 Pro includes a fingerprint authentication feature, adding an extra layer of security.
3. **PCI-Grade Anti-Tampering**: The device features a sophisticated ‘security house’ of circuitry that wipes data if any physical tampering is detected, further enhancing its resilience.

### Versatile Connectivity Options

While maintaining the high security of QR code transactions, the Keystone 3 Pro also introduces a USB port. This feature allows users to interact with software wallets like MetaMask more conveniently and perform firmware updates via a USB connection.

### Multiple Recovery Phrases and Multi-Signature Support
![Multiple Recovery Phrases and Multi-Signature Support.jpg](https://keyst.one/images/Multiple_Recovery_Phrases_and_Multi_Signature_Support_9ad0a218cd.jpg)

The Keystone 3 Pro supports up to three distinct recovery phrases, each secured by different passwords. This capability allows users to manage multiple crypto accounts from a single device and easily create new wallets for multi-signature transactions without needing extra hardware.

### Open-Source and Customizable

Built on the principles of openness and transparency, the Keystone 3 Pro features open-source firmware and hardware. Users can scrutinize, validate, and contribute to its development. Additionally, the device offers a customizable backplate, allowing users to personalize their Keystone with their favorite image.

### The Future of Hardware Wallets

The Keystone 3 Pro exemplifies what modern hardware wallets should be:
![The Future of Hardware Wallets.jpg](https://keyst.one/images/The_Future_of_Hardware_Wallets_d88539483b.jpg)

1. **User-Friendly**: With a large touchscreen and intuitive interface, the Keystone 3 Pro makes managing digital assets simple and efficient.
2. **Highly Secure**: Incorporating advanced security features such as triple secure elements, biometric authentication, and anti-tampering mechanisms ensures the highest level of protection for your assets.
3. **Versatile and Open**: The device’s ability to support multiple recovery phrases, multi-signature transactions, and seamless integration with various software wallets makes it incredibly versatile. Its open-source nature promotes transparency and trust.

### Conclusion

Don’t settle for outdated and cumbersome hardware wallets. The Keystone 3 Pro offers a balanced blend of user accessibility and sophisticated functionality, setting new industry standards. Protect your digital assets with the Keystone 3 Pro, the reliable companion in the world of Web3. Join the waitlist today and secure your future with the most advanced hardware wallet available.

How to Choose the Best Hardware Wallet in 2024.jpg

How to Choose the Best Hardware Wallet in 2024: A Comprehensive Guide


With the collapse of FTX, many high profile individuals and government entities have publicly raised concerns about the transparency of Centralized Cryptocurrency Exchanges.

The words “self-custody” have suddenly been thrusted into the spotlight. People are scrambling to grab hold of a hardware wallet which plays a critical part in helping them protect their digital assets.

So what is a hardware wallet?

The hardware wallet is a dedicated device where you can store your digital assets and also use it to sign various on-chain transactions. Since hardware wallets usually operate offline without any internet connection, it can safely generate and store your private key. The device also helps you to greatly minimize your attack vectors when compared against other devices such as laptops or mobile phones which remain constantly connected to the internet.

However, having your digital assets in a hardware wallet doesn’t mean that they’re fully protected. You, as the owner of the device, have to also be careful and ensure you’re up to date and educated with the latest security trends to prevent yourself from falling prey to scams.

## The Blind Signing Issue

![0_9b3e9WU55efJSrYg.webp](https://keyst.one/images/0_9b3e9_WU_55ef_J_Sr_Yg_66e0522523.webp)

Resource: [Unsplash](https://unsplash.com/)

Let’s talk about the elephant in the room, Blind signing.

Blind signing means confirming a blockchain-based smart contract transaction that you don’t know the full details of — something that has become common in crypto due to ‘ape-ing’ nature of its participants.

This is a serious security risk as you are requesting and giving permission to your hardware wallet to trust an external software to be genuine and to feed non-malicious commands and messages for it to sign. If that’s the case, what’s the point of purchasing a hardware wallet right?

Remember — Don’t Trust, Always Verify

One of the most basic fundamental security practices to owning a hardware wallet is that you should not trust any external software. You should always manually check the contract/transaction details displayed on your hardware wallet before approving it, to confirm you are not approving any malicious action.

Now, let’s take a closer look at what Keystone has built and how traditional hardware wallets are still in the ‘stone age’ and constantly promoting blind signing on the Solana blockchain.

## Keystone’s Solution For Solana Users

Firstly, big kudos to the Solflare Wallet team! Without their help, this won’t have been possible.

Keystone integrated with the [Solflare Wallet](https://twitter.com/solflare_wallet/status/1535290700761387012) to ensure support for all signing scenarios including transfer, stake, swap, swap on Dapps, message signing etc. on the Solana blockchain.

Let’s use token swapping in the example below.

Swapping tokens via an AMM is the most common action that users do on a daily basis. During a swap transaction, a **“transfer”** method will be initiated which includes both **“from address”**, **“to address”** and the corresponding **“amount”**.

Here comes the risky part — Blind signing a transaction

Assuming your computer/software has been compromised, hackers can easily change the “to address” into their own and steal your funds. This entire process can go completely unnoticed if you enable blind signing on your hardware wallet.

Here is what it looks like:

![0_3-al_hZn6ScoP3rN.webp](https://keyst.one/images/0_3_al_h_Zn6_Sco_P3r_N_2d9ed20509.webp)

As you can see, only a Message Hash (an unreadable string of characters) will be displayed on the device. The user will never know the details of the transaction he/she is approving, putting them at serious risk.

Keystone’s solution:
![0_SlO9ecblFn81Tkmi.webp](https://keyst.one/images/0_Sl_O9ecbl_Fn81_Tkmi_012b6e4dbf.webp)

Our device decodes the transaction message hash into a human readable format. It will display all the information (**“From address”**, **“To address”** and **“Amount”** etc) clearly on the 4-inch touchscreen and prompt users to manually check them before signing off on it.

To protect our users, Keystone currently covers transaction decoding for various scenarios on the Solana blockchain i.e. **Transfer, Native SOL Staking, Dapp Connection** etc.

Below is a table comparing what Keystone displays vs other traditional hardware wallets:
![1_WW5uhuyV37h8aI8n8wIypA.webp](https://keyst.one/images/1_WW_5uhuy_V37h8a_I8n8w_Iyp_A_8023bf9e8f.webp)

Unfortunately, blind signing is an ubiquitous phenomenon that still exists in the Web 3 space. However the team at Keystone is very optimistic that it will be eliminated one day.

Click [here](https://blog.keyst.one/blind-signing-a-security-black-hole-for-the-ethereum-community-13f909b848b6) to learn more about blind signing.


What Makes Keystone One of The Best Hardware Wallet on The Solana Blockchain_.jpg

What Makes Keystone One of The Best Hardware Wallet on The Solana Blockchain?

Greetings, I am [**Lixin**](https://twitter.com/BitcoinLixin), the CEO of [**Keystone Hardware Wallet**](https://twitter.com/KeystoneWallet). [**Not so long ago, I shared insights on our holistic approach to hardware wallet design**](https://blog.keyst.one/keystone-product-design-principles-cd833bc11125), emphasizing the critical necessity of looking at security from various angles. Building on that foundation, today, I wish to shed light on our latest product, the Keystone 3 Pro, and its embodiment of what we call “community-oriented” product design.

![Similar to a Weaponsmith meticulously crafting a shield, Keystone’s objective is to develop a product that safeguards the wider Web3 community](https://keyst.one/images/1d63ngt2_Ctp_Svh1y_HA_4j_Ng_1eb0e9b596.webp)

It’s been 12 years since I embarked on my journey in the tech world, starting as a product manager. Despite now holding the title of CEO, I remain a product manager at heart, continually focusing on the end-user’s experience and needs.

## Web2 vs Web3

Before delving into the article, it’s crucial to understand the distinct differences between Web2 and Web3 ideologies. Succinctly put: while Web2 companies construct walled gardens, Web3 organizations are committed to building bridges to forge connections.

![Web2](https://keyst.one/images/17_Dfaseyy_Re_KM_1rw_QO_Htt_PA_ccebd2bdf0.webp)

![Web3](https://keyst.one/images/1rlyje_Z_Vzm_Psz_Pb_R2_Jh8_Gg_Q_fecdf5c96e.webp)

 1. **Web2 Mentality:** Here, the emphasis is on creating an enclosed and self-contained ecosystem that effectively retains users. The main motivation is to optimize financial gains. While this is not inherently negative, it does limit open collaboration and innovation.

 2. **Web3 Vision:** This approach is about building bridges. It’s about fostering connections between disparate “islands” and allowing for seamless integration. Even more impressively, the products in Web3 aren’t just “connected”; they can be layered atop each other to cater to myriad scenarios.

## What is a “Community-Oriented” Product?

Now, after helping you understand the stark contrasts between the philosophies of Web2 and Web3, I’d like to share the design principles that motivated the creation of the Keystone 3 Pro. Great “community-oriented” products are:

 1. **Non-restrictive:** In today’s digital age, communities crave a setup where their data isn’t confined to a single app or platform. They seek the freedom to choose.

 2. **Composable:** Products, especially in the Web3 space, should be inherently interoperable, allowing them to be meshed together to cater to a multitude of user scenarios.

 3. **Less Profit Driven:** While such a design philosophy might not always be viable, the beauty of Web3 lies in consensus-building. If a product garners community consensus, its longevity and success are assured.

![Community-Oriented products empower their users with options](https://keyst.one/images/123d_ez1_w_v_J_Kn_f_Z_n_Q_204b0e62aa.webp)

Let’s take a look at some examples where this ethos is demonstrated in Web3:

 1. [**BIP39**](https://www.halborn.com/blog/post/what-is-a-bip39): At its core, BIP39 is about generating a [**seed phrase**](https://blockworks.co/news/what-are-seed-phrases#:~:text=A%20seed%20phrase%20is%20a,a%20seed%20phrase%20for%20recovery.), which is a series of easily remembered words. This serves as a human-friendly representation of a wallet’s seed, which is crucial for backing up and restoring wallet data. Due to it’s widely adopted standard, the BIP39 seed phrase ensures that users can migrate or recover their assets across different software wallets without any hitches.

 2. [**Fat Protocol Thesis**](https://thedefireport.substack.com/p/revisiting-the-fat-protocol-thesis): The thesis here is that most of the value is captured at the protocol layer (e.g., [**Ethereum**](https://ethereum.org/en/), [**Bitcoin**](https://bitcoin.org/en/). Applications built on top (e.g, Decentralized apps like [**Uniswap**](https://uniswap.org/), [**Sushi**](https://www.sushi.com/), [**Pancakeswap**](https://pancakeswap.finance/) might be numerous and valuable, but the underlying protocol will still capture the significant share of the value.

 3. [**Composable Wallets**](https://medium.com/coinmonks/1the-importance-of-composable-wallets-for-users-and-developers-accb2aadff49): In summary, composable wallets can be seamlessly integrated or used in combination with other software or digital wallet solutions, providing users with expanded functionality and interoperability. These types of wallets are especially useful in Decentralized Finance (DeFi) and blockchain ecosystems where multiple tools, platforms, and protocols often need to interact.

## Keystone 3 Pro — The People’s Hardware Wallet

![Protecting our users 24/7](https://keyst.one/images/1_Vym_Y_Fou_R_Ud_Ka_KK_Ps_R5d_O_Jg_00f1c7395f.webp)

So, what makes the Keystone 3 Pro a great “community-oriented” product?

 1. **Interoperable (Non-restrictive & Composable):** Rather than pushing for our own ecosystem, we’ve ensured that the Keystone 3 Pro is compatible with various software wallets. This not only enhances the security of these software wallets but also provides users with the comfort of not having to purchase and adapt to a new hardware wallet and its unique software application as their digital asset holdings continue to grow. Our vision is to transition away from our proprietary companion software wallet and to ensure that the Keystone 3 Pro is universally compatible with every software wallet out there.

 2. [**Multi-Seed Support**](https://blog.keyst.one/unleashing-the-power-of-multiple-secret-recovery-phrases-with-keystone-3-a-comprehensive-guide-3c3afb997cc4) (Less Profit Driven): We understand the importance of flexibility. That’s why we’ve programmed the Keystone 3 Pro to be able to support up to three seed phrases, eliminating the need for users to purchase several Keystone devices to manage multiple seed phrases simultaneously.

Commercially, these decisions may seem conflicting. But we firmly believe in the overarching thesis of Web3 — **Consensus Trumps All**. By prioritizing the community and their needs, we believe that the Keystone 3 Pro will not only stand out but also stand the test of time.

## Closing Thoughts

To all our valued users, I deeply appreciate the improvement feedbacks you’ve provided Keystone throughout the years. It has not only been instrumental in the growth and refinement of the Keystone 3 Pro but has also underscored the significance of a community-driven approach.

Keystone’s mission has always been to equip you with the best, and your insights have been a beacon guiding us through the ever-evolving landscape of Web3. As we continue on this journey, we hope you remain by our side and share more of your Keystone experiences and feedback with us.

![We place great importance on and prioritize user feedback](https://cdn-images-1.medium.com/max/2048/1*VymYFouRUdKaKKPsR5dOJg.png)

Do continue to stay connected and share more thoughts with us about the Keystone 3 Pro on Twitter — [**@KeystoneWallet**](https://twitter.com/KeystoneWallet), as we further our commitment to safeguarding your financial independence.

Thank you for being a pivotal part of our story. Here’s to more years of collaboration and mutual growth!



cryptocurrency hardware wallet.jpg

Keystone 3 Pro: A Community-Centric Designed Hardware Wallet

As technology evolves, so do the approaches and philosophies behind its development. 2 years ago, we [**penned down our thoughts on the open-source approach for the Keystone Pro**](/on-open-source-and-transparency-ba37fa1c1e8c). Now, with the launch of the [**Keystone 3 Pro**](/keystone-3-the-ultimate-protector-of-your-digital-assets-122144288fad), we see this as the perfect time to share our updated perspective and insights on open source.

## Open Source: More than Just Publishing and Sharing Code

![193CTXz7IaX8XbzazhzbASA.webp](https://keyst.one/images/193_CT_Xz7_Ia_X8_Xbzazhzb_ASA_2170e4039f.webp)

The true essence of open source goes beyond releasing code to the public

Many misconstrue open source as merely “making the code public”. However, at Keystone, we view it as a philosophy that drives our commitment to code transparency, security, and product excellence. Let’s take a look at some examples below:

**Technical Hurdles:** Transitioning to an open-source model isn’t just about sharing the code; it’s also equally about adapting the product’s technical architecture. For instance, protecting chip communication channels in the Keystone device became paramount for us. With proprietary closed source software, we could easily use asymmetric cryptography with a private key to safeguard the channels. But in an open source setting, the visibility and transparency of our code would compromise and make this solution vulnerable. As a result, we decided to adopt a different approach where every Keystone device, upon initialization, would generate its own unique set of communication keys exclusive to that device only.

**Product Execution:** Code quality is synonymous with software quality. Well-structured, flawlessly written code leads to superior, reliable software. Conversely, poor code can cause myriad issues from bugs to complete system failures. Many software wallets, in their haste to outpace competitors, may compromise on code quality, opting for closed-source to shield their intellectual property. Keystone, however, believes in the integral value of open source code. Moreover, we understand that our prowess isn’t restricted to software code as well. Our strength as a company also lies in supply chain management, global fulfillment, and managing diverse channels, including e-commerce.

**Setting Audit Standards:** Embracing open source nudges us towards rigorous code auditing. Our commitment is evident in how we treated the audit reports for the Keystone Pro; we open-sourced them, ensuring transparency. We also meticulously addressed all issues and concerns raised. At present, the Keystone 3 Pro’s firmware is under scrutiny by [**SlowMist**](https://www.slowmist.com/), and [**Keylabs**](https://keylabs.io/) (formerly [**Wallet.fail**](https://wallet.fail/)) is overseeing the hardware design. The reports will be made avaliable to the public once the audits are completed.

## The Pitfalls of Closed Source Tech

![1V0J6xx2r8BN_W_sKXKtUwA.webp](https://keyst.one/images/1_V0_J6xx2r8_BN_W_s_KX_Kt_Uw_A_0f2eab000d.webp)
The spike in hacking incidents have jeopardized many users

Recent hacks of prominent software wallet projects highlight the risks associated with closed-source systems. Incidents include:

[**Slope Wallet**](https://decrypt.co/106680/solana-hack-blamed-slope-mobile-wallet-exploit)**:** [**Solana**](https://solana.com/) users faced a setback with a massive hack that resulted in a loss of approximately $4.5 million in $SOL tokens and other crypto tokens. The exploit was linked to a vulnerability in the [**Slope mobile wallet app**](https://slope.finance/). Assessments from Solana’s developers hint that a private key mismanagement led to the “accidental transfer” of these keys to an external party. Users who were compromised had utilized Slope mobile wallet to generate their wallet address.

[**MyAlgo Wallet**](https://cointelegraph.com/news/myalgo-users-urged-to-withdraw-as-cause-of-9-2m-hack-remains-unknown)**:** The leading software wallet provider for the [**Algorand Network**](https://algorand.com/), [**MyAlgo**](https://wallet.myalgo.com/access), urged its users to take immediate action to withdraw their crypto assets from any MyAlgo wallet generated using a seed phrase. That came in the wake of a mysterious hack, which has baffled even the MyAlgo team and other experts. The breach drained an estimated $9.2 million in $ALGO, the native token of the Algorand Network.

[**Atomic Wallet**](https://cointelegraph.com/news/atomic-wallet-exploited-users-report-loss-of-entire-portfolios)**:** Renowned for its decentralized and noncustodial attributes, **t**he team behind [**Atomic wallet**](https://atomicwallet.io/) had to issue warnings across their social media platforms and temporarily suspend their app downloads during the hack. Users of Atomic Wallet reported losses exceeding $35 million. While the team evaluated numerous potential security risks, ranging from malware code injection and man-in-the-middle attacks to viruses targeting individual devices, they couldn’t precisely identify the specific type of breach.

If the above software wallets had adopted an open source approach, auditors could have spotted and helped rectified their potential vulnerabilities, minimizing the likelihood of such breaches. Nevertheless, this strengthens Keystone’s commitment to ensuring our hardware wallet works seamlessly with all software wallets. Regardless of the many software wallets continuing with a closed-source model, our goal remains to enhance their security universally.

## Open Source Enhancements in the Keystone 3 Pro
![1Vl8T9H-Vz5sHtLRbHGWbRw.webp](https://keyst.one/images/1_Vl8_T9_H_Vz5s_Ht_L_Rb_HG_Wb_Rw_fd5caf8a2a.webp)
Much like individuals who workout daily at a gym to build strength, Keystone consistently updates our hardware and software to reinforce the security of our hardware wallet

For the Keystone Pro, we took pride in making a variety of features open-source. This encompassed everything from the Secure Element firmware to the hardware blueprint (including the circuit layout and BOM). Additionally, we’ve also shared the hardware wallet application framework and segments of its operating system layer publicly.

With the Keystone 3 Pro, our dedication to transparency still stands firm. **EVERY SINGLE LINE** of code we’ve written, along with the hardware designs and audit reports from SlowMist and Keylabs, will be open-sourced. We aim to make these reports publicly available in November 2023 after resolving all issues highlighted in the audits.

The main notable enhancement in the Keystone 3 Pro compared to its predecessor is the transition from Android to an embedded system. Despite its widespread use, Android’s complexity makes it cumbersome for developers to delve into. By adopting an embedded system, we’ve substantially streamlined our code, making it more accessible and scrutinizable.

This in turn, also makes the firmware of the Keystone 3 Pro more “Reproducible”, empowering individuals with the ability to audit, experiment and test out the firmware’s code for themselves. It allows users to verify that the firmware loaded onto Keystone’s hardware wallets matches the code we publicly share. This resonates deeply especially with the people who live by the mantra “Don’t Trust, Always Verify.” For them, mere access to open-source code isn’t enough.

If you’d like to probe deeper into our security architecture, we also welcome you to check out this article about the [**secure elements chips avaliable in the Keystone 3 Pro**](/secure-elements-the-bedrock-of-hardware-wallet-security-1dd8cbdef461).

## Keystone’s Unwavering Allegiance to Open Source
![1bJ_ywtrUQapZZ2u7jlwJBA.webp](https://keyst.one/images/1b_J_ywtr_U_Qap_ZZ_2u7jlw_JBA_61906de3c6.webp)
We’ve made an oath to always remain committed to open source

At Keystone, our pursuit of open source isn’t a mere trend but a deeply ingrained belief. We recognize that open source goes beyond than just sharing code; it’s about embracing transparency, fostering community collaboration, and continually elevating security standards. The Keystone 3 Pro epitomizes our growth and our commitment to this philosophy. Our unwavering belief in open source resonates in our products, our transparency efforts, and our drive to deliver unrivaled security. As we forge ahead, we value the mutual trust that binds us with our community, and together, we’re eager to continue to redefine the boundaries of technological advancement in Web3.

## About Keystone

[**Keystone**](https://keyst.one/) is an [**open-source**](/the-role-of-open-source-tech-in-keystones-development-4dd77faea752) airgap hardware wallet that utilizes an embedded system. To further enhance its security, the device is equipped with [**three secure element chips**](/secure-elements-the-bedrock-of-hardware-wallet-security-1dd8cbdef461). One of Keystone’s unique features is its ability to support [**multiple recovery seed phrases**](/unleashing-the-power-of-multiple-secret-recovery-phrases-with-keystone-3-a-comprehensive-guide-3c3afb997cc4), reducing the need to purchase multiple hardware wallet devices.

With the [**primary aim**](/keystone-3-pro-a-community-centric-designed-hardware-wallet-81646869feff) of maximizing security against potential threats, minimizing dependence, reducing human errors, and eliminating single points of failure, Keystone also places a strong emphasis on extensive interoperability. It is compatible with well-known software wallets such as [**MetaMask**](https://metamask.io/) (both [**Extension**](https://twitter.com/MetaMask/status/1469351219290382341) and [**Mobile**](https://twitter.com/MetaMask/status/1517256930389110785) versions), as well as other premier software wallets like the [**OKX Web3 Wallet**](https://www.okx.com/web3), [**Solflare**](https://solflare.com/), [**Rabby**](https://rabby.io/), and more.

[**Website**](https://keyst.one/) **|** [**Twitter**](https://twitter.com/KeystoneWallet) **|** [**Discord**](https://keyst.one/discord) **|** [**Telegram**](https://t.me/KeystoneWallet) **|** [**GitHub**](https://github.com/KeystoneHQ)

Keystone's Blog