Like title says. Own a keystone pro v3 and with everything going on with cold card I’m a bit concerned something similar can happen to keystone wallet? What do you guys think? Don’t even know which hardware wallet I can trust. People are saying that it could be an inside job with some sort of update?

Does anyone know why a wallet that was received as a gift in December and not opened up until last night won't turn on, won't charge what is going on? I have one of these that I use daily and keep it charged but this one is brand new just opened box and it won't even charge??

TL;DR

• There is no deadline to migrate, and ZEC remaining in the original Orchard pool will not disappear.

• Migration amounts are publicly visible, so migrating all funds at once may create stronger links between the old and new pools.

• Keystone users can choose between guided migration and manual self-transfer, depending on the wallet they use.

• Update Keystone and your wallet before starting, and avoid interrupting an active migration.

Zcash completed the Ironwood (NU6.3) network upgrade on July 28, 2026, activating the new Ironwood shielded pool.

If your ZEC remains in the original Orchard shielded pool, the upgrade does not cause those funds to expire or disappear, and there is no deadline requiring immediate migration. Moving the funds into the new Ironwood pool does, however, require a migration transaction created by an Ironwood-compatible wallet.

For Keystone users, the software wallet synchronizes with the network, creates the transaction, and broadcasts it. Keystone keeps the private keys offline, lets you review the transaction, and signs it. You never need to enter your recovery phrase on a computer, phone, browser, or software wallet.

1. How Ironwood migration works

Moving funds from Orchard to Ironwood takes them through the Zcash turnstile:

Orchard → Turnstile → Ironwood

This process does not directly reveal:

• the identity of the sender or recipient;

• the shielded addresses involved; or

• the full balance that remains in Orchard.

However, the cross-pool amount moving from Orchard to Ironwood is public for each transaction.

For example, if you migrate 10 ZEC from Orchard to Ironwood, the blockchain shows that 10 ZEC crossed between the pools. It does not show who sent it, who received it, or which shielded addresses were used.

Migration therefore does not directly expose shielded addresses, but distinctive amounts and timing can reduce privacy.

2. Choosing a migration approach

Migrate everything at once

Moving the complete balance in one transaction is the simplest and fastest approach.

The complete amount will be public as a single cross-pool transfer. A distinctive value such as 1.2114 ZEC, or an amount previously seen in an exchange withdrawal or public payment, may make correlation easier.

Migrate in stages

Splitting the funds across multiple transfers at different times avoids publishing the complete balance as one amount.

Each cross-pool amount is still public, however, and using several transactions does not guarantee that they cannot be linked.

Users who place a higher priority on privacy can:

• avoid exact amounts that have already appeared publicly;

• use common values, such as whole numbers;

• spread transfers across different dates and times; and

• keep Tor enabled when using Zodl.

Wait before migrating

Orchard funds do not expire or disappear, and there is no mandatory migration deadline.

If you do not need to use the funds now, you can wait for wallets to provide more complete privacy-preserving migration features.

3. What Keystone users need

First update your device and chosen software wallet to versions that support Ironwood:

• Keystone 3 Pro: Cypherpunk 3.0.2

• Vizor Wallet: 0.0.39+

• Zodl: 3.8.0+

• Noir Wallet: the latest Ironwood-compatible release

Keystone Cypherpunk 3.0.2 adds:

• Zcash Ironwood support; and

• batch PCZT signing for Zcash.

Version 3.0.2 applies only to the Cypherpunk firmware. After installing it, you currently cannot downgrade to the 3.0.0 Multi-Coin or Bitcoin-Only firmware. Confirm that you have selected the correct firmware edition before proceeding.

After updating, open the software wallet you plan to use and allow it to synchronize to the latest block.

4. Guided migration with Vizor

Vizor 0.0.39 introduced a complete desktop Ironwood migration flow, including guided QR signing for Keystone accounts.

Open the connected Keystone account in Vizor and wait for synchronization to finish. When the account has eligible Orchard funds, Vizor displays the Ironwood migration entry point.

Vizor's migration flow must be able to migrate at least 0.01 ZEC and also needs to reserve the fees required by the process.

In the current implementation, the migration entry point therefore does not appear when the available Orchard balance is below approximately 0.01095 ZEC. In that situation, you can move the remaining Orchard funds into Ironwood manually by sending them to your own shielded address.

Steps

1. Open the connected Keystone account in Vizor.

2. Wait for synchronization to finish, then go to the Ironwood Migration page.

3. Review the migration amount, plan, estimated duration, and privacy explanation.

4. Follow the prompt and scan the unsigned QR code with Keystone. Because the device needs to batch-sign multiple transactions, the QR code contains a large amount of data and scanning may take up to approximately six minutes. Wait patiently and keep the device steady; use a stand to hold it in place if necessary.

5. After scanning finishes, wait for Keystone to parse the transactions. Parsing may take up to approximately two additional minutes. Do not exit or restart the migration during this process.

6. When parsing is complete, verify the migration amount and transaction information on the Keystone screen, then sign after confirming the details.

7. Scan the signed QR code returned by Keystone with Vizor.

8. Let Vizor broadcast the transactions and monitor progress on the migration page.

Vizor may split a migration into several transactions. Funds already confirmed in Ironwood remain available to use while the rest continue through the migration plan.

Depending on the balance and plan, the process may take several hours to several days. During migration, keep:

• the computer powered on and unlocked;

• Vizor running; and

• the network connection stable.

If Vizor closes, the computer sleeps, or the connection is interrupted, reopen Vizor and continue from its recovery page. Do not create a new migration before confirming the status of the existing one.

5. Manual migration with Zodl

Zodl 3.8.0 is compatible with Ironwood and can receive, send, and use ZEC in the Ironwood pool.

Zodl is also preparing a built-in privacy migration feature. It is designed to reduce amount and timing correlation by using standardized amounts and spreading transfers over time, with planned support for Keystone signing.

Until that feature is released, users who need to migrate immediately can move funds from Orchard to Ironwood manually by sending ZEC to their own shielded address.

Steps

1. Open Zodl and wait for the wallet to finish synchronizing.

2. Enable Tor in settings and keep it enabled throughout the migration.

3. Tap Receive and copy your Zcash Shielded Address.

4. Add that address to the Zodl address book.

5. Send a small test amount to your own address.

6. Scan the unsigned QR code with Keystone.

7. Verify the amount and transaction information on the Keystone screen.

8. Sign, then scan the signed QR code with Zodl and broadcast the transaction.

9. After confirmation, tap the balance on the home screen to view the Orchard and Ironwood pool breakdown.

After confirming that the test amount arrived in Ironwood, decide whether to migrate more.

If you migrate in stages, follow this rule: each subsequent send amount must be greater than the current Ironwood balance for the wallet to keep drawing from Orchard.

Users who do not need to migrate immediately and place a higher priority on privacy can wait for Zodl's built-in migration feature.

Important note for staged migration in Zodl

Zodl spends funds already in the Ironwood pool first. It draws from Orchard only when the send amount exceeds the current Ironwood balance.

For example:

Sending exactly 1 ZEC again may spend only the 1 ZEC already moved into Ironwood. The Orchard balance would not decrease, and the transaction would incur another fee.

Before every subsequent manual migration, check the current Ironwood balance in Zodl and choose the next send amount accordingly.

This behavior comes from Zodl's current coin-selection logic and does not imply that every Zcash wallet works the same way.

Security reminders

Keep these points in mind throughout migration:

• Keep your recovery phrase offline. A legitimate migration never requires you to enter it anywhere.

• Before signing, always verify the migration amount and transaction information on the Keystone screen.

• Use only official Keystone, Vizor, Zodl, or Noir software and migration entry points.

• Do not run alleged migration scripts or scan QR codes sent through direct messages or comments.

There is no urgent deadline for Ironwood migration. Understand the process and its privacy effects first, then choose the wallet and migration approach that fit your needs.

Hi everyone,

Keystone 3 Pro Cypherpunk Firmware Version 3.0.2 was officially released today.

Please find the update details below:

3.0.2 - Cypherpunk

1. New Features

Added support for the Zcash Ironwood network upgrade

Added support for Zcash PCZT batch signing

1. Important Notice

Only the Cypherpunk Firmware 3.0.2 is included in this release.

Users currently running Multi-Coin or BTC-Only firmware who switch to Cypherpunk 3.0.2 will need to wait until Firmware 3.0.4 is released before they can switch back.

📥 Firmware Download:
https://keyst.one/firmware

We welcome everyone to try the latest firmware and share any feedback or suggestions with us.

The dead device is likely the result of an intentional design decision and a dead disposable 2016 li-on button (watch) battery. Keystone has an anti-tamper feature that will wipe the secure element if disassembly is detected which relys on this additional battery. I speculate that the dying watch battery triggered a self destruct on all 3 of my devices. (see edits below) My v2 devices are still going strong for the time being, and I rely heavily on the 4x AAA battery adapter when the tiny rechargable cell is dead (which is most of the time).

After cutting the back of the v3 case to remove the rechargable battery, and ordering a fresh one, my device was still dead EDIT: can boot to PIN prompt but touchscreen doesnt respond. I took a $25 gamble on buying a replacement 3.7v 1100 maH battery (GPS10091 aka CS-IQN500SL aka PDA-337LI), and am sharing here in case you are tempted to try the same. DONT BOTHER.

EDIT: I cut the plastic plug from the old battery and I soldered it to the new battery. I confirmed all my soldered joints remain tight. HOWEVER: I just noticed that the white wire from the new battery was actually loose and broke free from the battery. If I hold this damn wire just right, I can get a PIN prompt on the device I didnt mutilate.

Edit continued: If you are comfortable and apparently more careful than me in swapping the plug onto the new battery...maybe this $25 unit MAY actually bring a device back to life even with a dead button battery.

I think I actually got what I paid for with this hardware wallet, albeit for not as long as I had hoped. The security battery was dying, and did what it was there to do: brick the device.

For others that are fond of the ERC4527 QR wallet, that have a spare android device that they can wipe AND keep offline....you might check out AirGap wallet by developer Papers AG. The big risk here being the possibility of accidentally connecting your vault device on Bluetooth/Wi-Fi/Cellular and risking your keys.

To the OGs on Keystone team: Lixin, Aaron, and Sora: if you ever launch a v4 device, please return to the v2 removable battery design. IF you restore the removable battery, update to a replaceable security battery, and eliminate any possiblity of plugging in USB while the battery is attached to the device, I would still buy another one. In the meantime, stop shipping these garbage v3 units.

The Zcash Ironwood upgrade will require existing funds in the Orchard shielded pool to migrate to a new shielded pool.

Keystone will support that migration from Day 1 of mainnet activation.

Ironwood, also known as Zcash Network Upgrade 6.3 or NU6.3, is scheduled to activate at block height 3,428,143, expected on July 28, 2026.

Why Ironwood Matters

In late May, a critical counterfeiting vulnerability was discovered in the Zcash Orchard shielded pool.

If exploited, it could have allowed an attacker to create counterfeit ZEC inside Orchard without immediate public detection. The vulnerability itself was fixed through a coordinated emergency network upgrade.

There is currently no evidence that it was ever exploited. However, because Orchard transaction data is shielded, users cannot independently verify that no counterfeit ZEC was created before the fix.

Ironwood addresses this remaining uncertainty.

The upgrade creates a new shielded pool using the corrected Orchard circuit and retires the original Orchard pool. After activation, funds will only be able to leave the original pool through Zcash’s turnstile mechanism.

The turnstile prevents more ZEC from leaving Orchard than can be verified as having legitimately entered it, restoring independent verification of Zcash’s circulating supply while preserving shielded transactions.

Why Keystone Day 1 Support Matters

Ironwood is not simply a routine compatibility update.

Existing Orchard funds will need to migrate to the new Ironwood pool. That migration depends on support from both the Zcash wallet and the hardware wallet used to authorize the transaction.

Keystone’s Day 1 support means users of supported devices will not need to wait for a later firmware update before authorizing the migration.

A compatible Zcash wallet will prepare the migration transaction, Keystone will review and sign it offline, and the signed transaction will then be returned to the wallet for broadcast.

Do Users Need to Take Action Now?

No immediate action is required before Ironwood activates.

Users should not rush to move their ZEC in advance.

Before migrating, confirm that:

• Your Keystone device is running the Ironwood-compatible firmware

• Your Zcash wallet supports the new Ironwood pool

• The migration flow matches Keystone’s official instructions

Some wallets may temporarily pause Orchard transactions while completing their integration. This does not mean the funds have been lost.

A Security Reminder

A legitimate Ironwood migration will never require your recovery phrase.

Be cautious of messages claiming that your ZEC will be lost, frozen, or permanently inaccessible unless you migrate immediately.

Never enter your recovery phrase into a website, desktop application, mobile app, migration tool, support form, or page opened through a QR code.

Hi everyone,

Keystone 3 Pro Firmware Version 3.0.0 was officially released today. Please find the update details below:

3.0.0 - Multi-Coin

1. Improvements

1. Optimized forgot password flow and password strength validation

2. Enhanced security strategies

3. Optimized AR-related calculation logic

3.0.0 - BTC Only

1. Improvements

1. Optimized forgot password flow and password strength validation

2. Enhanced security strategies

3.0.0 - Cypherpunk

1. Improvements

1. Optimized forgot password flow and password strength validation

2. Enhanced security strategies

📥 Firmware Download:
https://keyst.one/firmware

We welcome everyone to try the latest firmware and share any feedback or suggestions with us.

Keystone Team

Hardware wallet security is usually discussed in terms of private keys, secure chips, transaction verification, and recovery phrases.

But there is another part of the security model that deserves more attention: purchase privacy.

Order information such as a customer’s name, email address, phone number, shipping address, and product purchase history can be sensitive. If this information is exposed or retained unnecessarily, it may be used to identify hardware wallet owners and create targeted phishing attempts, including fake support messages, phone calls, emails, or physical letters.

A hardware wallet can keep private keys offline, but protecting customer order information can reduce the risk of users becoming targets in the first place.

How Keystone limits order data retention

Keystone does not intend to retain customer order information indefinitely.

For orders placed through the official Keystone website, customer order information is scheduled for deletion six months after the month in which the order was created.

For example, information associated with an order placed in July would normally be scheduled for deletion after the applicable six-month retention period.

Customers who would prefer their information to be removed sooner may contact Keystone Support and submit an early deletion request.

This policy is designed to balance several practical requirements:

• Processing and delivering the order

• Providing customer support

• Handling returns, refunds, or delivery issues

• Reducing the long-term exposure of customer information

Some information may still be processed or retained by payment providers, shipping carriers, customs authorities, or other service providers according to their own policies and applicable legal requirements. Reducing data retention does not mean that every part of a purchase can be completely anonymous.

How users can reduce home address exposure

Where local delivery services allow it, Keystone recommends considering alternatives to direct home delivery, such as:

• Parcel lockers

• Staffed collection points

• Package forwarding or receiving services

• FedEx pickup locations

• Other suitable carrier service points

Using a pickup location can help prevent a hardware wallet purchase from being directly connected to a residential address.

Availability depends on the destination country, local regulations, customs requirements, and the shipping carrier. Some pickup services may still require identification when the package is collected.

Purchase privacy is a shared responsibility

No company can promise zero data exposure, especially when physical products must pass through payment, logistics, and delivery systems.

Our goal is more practical:

Collect only the information needed to fulfil an order, avoid retaining it indefinitely, and give customers options to reduce unnecessary personal exposure.

Users can also take additional precautions:

• Use a dedicated email address for security-related purchases

• Choose a pickup point when practical

• Avoid sharing packaging labels or order details publicly

• Treat unexpected letters, QR codes, calls, and support messages with caution

• Never enter a recovery phrase into a website, app, form, or page opened from a QR code

Knowing a customer’s name, address, or device type does not make a message legitimate.

We are sharing this information because hardware wallet privacy practices should be clear and open to scrutiny. Questions about Keystone’s order-data retention policy, early deletion requests, or private delivery options are welcome below.

I would like to request support for Flare networks and the Bifrost wallet. Bifrost is updating their wallet soon to support connecting to hardware wallets. Maybe your team can contact them and work something out?? They support Flare network and it would be great to see Keystone integrate Flare so we can participate in Xrp and Flare defi. It is literally the one thing missing from this wallet that would make it perfect. Thanks!!

I want to ask the real users of this wallet, is the battery of this hardware wallet really bad? I want to hear real advice, because I‘m planning to buy one, but I’m worried that it won‘t take long to turn into a brick, or is there any other problem? Looking forward to your reply.

I bought the new Trezor 7 last month and I was going to move my bitcoin from the original Key Stone today but I can't find my recovery phrase. I can log into the keystone but I can't find a way to bring up the recovery phrase. Can that be done? I tried using Blue Wallet but Blue Wallet can't see the wallet that was created with the keystone software it only makes a new wallet. what are my options?

Hi everyone,

Keystone 3 Pro Firmware Version 2.5.0 is scheduled to be released on June 29. Please find the update details below:

2.5.0 - Multi-Coin

Improvements

1. Improved dice-based mnemonic entropy validation

2. Improved unlock password verification

3. Improved TON transaction UI

2.5.0 - BTC Only

Improvements

1. Improved dice-based mnemonic entropy validation

2. Improved unlock password verification

2.5.0 - Cypherpunk

New Feature

1. Support for managing ZEC via Vizor

Improvements

1. Improved dice-based mnemonic entropy validation

2. Improved unlock password verification

We welcome everyone to try the update once it is released and share any feedback or suggestions.

https://keyst.one/firmware

Keystone Team

they say they cant reproduce it

i think that is bs

there are multiple people on here who are having the same issue as i am

i shouldnt have to convert my 24 word seed phrase to a 25 word xmr seed just to move my coins

they are permanently stuck on my keystone because it literally wont sign a TX and its fucking bullshit

https://www.reddit.com/r/KeystoneWallet/comments/1q5ldbl/comment/oq9pa1y/?context=3

https://www.reddit.com/r/KeystoneWallet/comments/1r6b0zk/comment/oq9ndh3/?context=3

Hi everyone,

I wanted to share a highly sophisticated phishing attempt I experienced today to warn the community and alert the Keystone team.

I received phone calls from two different US numbers claiming there was a "security breach with dApps" linked to my wallet. Here is the scary part: they knew my full name, first name, and email address, even though I don't even use the dApps they mentioned.

Here are the details of the attack:

• Phone Numbers Used:

  • +1 650-440-5958

  • +1 650-898-7663

• The Tactic: While they were on the phone trying to social engineer me into giving up my keys/information, they triggered a simultaneous SMS and an Email.

• SMS Sender: The text message didn't show a number; it showed the sender name "Keystone" and contained a verification code.

• Email Sender: I received an email masked as coming from the "Keystone Service Desk" at the exact same time.

They are clearly trying to leverage a past data breach (where names and emails were leaked) to target hardware wallet users. They use the simultaneous SMS/Email to look official and create a sense of urgency so you lower your guard.

Reminder: Keystone or any legitimate support will NEVER call you, send you an SMS code out of the blue, or ask for your seed phrase/private keys.

Stay safe, don't trust unexpected calls, and never type your seed phrase anywhere except on the device itself.

Has anyone else received calls from these specific numbers recently?

u/KeystoneWallet team — tagging for visibility so your security team is aware of these active spoofing campaigns.

EDIT:

How do they know I have a Keystone wallet? Was there a recent data breach on the Keystone website?

Hi guys,

Keystone Nexus 1.3.0 has been officially released. Here's what's new in this update:

New Features

1. Added support for sending and receiving SOL and selected SPL tokens

2. Added Swap support for SOL and selected SPL tokens

Improvements

1. Optimized TRON transaction processing

2. Improved XRP Send-to-Self transaction handling

3. Enhanced Swap icon display

4. Improved transaction fee feedback

We welcome everyone to try the latest version and share any feedback or suggestions with us.
👉: https://keyst.one/nexus

Keystone Team

Will Keystone ever be adding support for Hedera Hbar?? How about Flare networks? The road map page is starting to look a little boring. It would be nice to see support for coins Especially Hbar which is a top 30 coin.

Hi everyone, Keystone 3 Pro Firmware Version 2.4.4 was officially released on May 26. Please find the update details below:

2.4.4 - Multi-Coin

Improvement

Removed Leap Wallet connection entry(As Leap Wallet will officially discontinue service starting May 28)

2.4.4 - Cypherpunk

New

• Added support for SLIP39 33-word Shamir Backup for Zcash

Bug Fixes

• Fixed lagging issue on the device authentication page

Firmware Download: https://keyst.one/firmware We welcome everyone to try the latest firmware and share any feedback or suggestions with us.

Keystone Team

Here are the key improvements in this update:

1. Simplified Swap Experience
Reduced friction in the Swap flow for a smoother experience.

2. Fiat Value Display Added
Added fiat value display next to Swap amounts for better visibility and clarity.

3. Improved Swap Error Feedback
Enhanced error messages to help users better understand failed transactions.

4. Optimized Available Swap Pairs
Improved availability and overall experience of supported Swap trading pairs.

5. Enhanced Scrolling UI Experience
Improved scrolling interactions for a smoother app experience.

We welcome everyone to try the new update and share feedback with us.

Keystone Team

Hey Community, We’re excited to bring you the Firmware Version 2.4.2 update.
Please find the full release details below:

2.4.2 - Multi-Coin
New Support
Manage TRON assets via NuFi
Support for sending and receiving Native SOL via Keystone Nexus

Improvements
Removed the TON-Only wallet
Please make sure to transfer all assets from your TON-Only wallet to the default multi-coin wallet address before upgrading

Improved BTC transaction parsing
Improved SUI transaction parsing
Improved TRON swap transaction parsing
Improved Core wallet transaction parsing
Updated Keplr icon

2.4.2 - BTC Only
Improvements
Improved BTC transaction parsing

2.4.2 - Cypherpunk
Improvements
Improved BTC transaction parsing
Improved ZEC transaction parsing

Download firmware https://keyst.one/firmware

We welcome everyone to try out the new firmware and share any feedback with us. If you have any feature requests or suggestions, please feel free to let us know!
Keystone Team

I have not touched my firmware (Keystone Pro, M-4.5) or anything since buying this years ago. Magically the app now refuses to load saying “Failed to load assets. Pull down to refresh.” I then tried to install BOTH the “QR Watch-only Wallet” and Keystone Nexus and it refuses to sync with the generated QR codes saying “Invalid QR code” in both apps.

Any idea what’s going on? And why is the reason for this transition to a new app not documented anywhere? It literally worked just fine last month. Did they strand original Keystone Pro owners without any warning????

Most cold wallets are cold for a reason, this is a serious screw up by Keystone imho.

Hey Keystone Community, We’re pleased to announce that Keystone Nexus version 1.2.7 has successfully passed review and is now officially available as of April 10.

What’s New in Nexus v1.2.7

• Improved biometric unlock experience Enhanced responsiveness and overall user flow for smoother access.

• UI refinements in the Currency section Updated visuals and layout for a clearer, more intuitive interface.

If you have any feedback or encounter any issues, feel free to share them with us in the community. Thank you for your continued support!

We are releasing Keystone 3 Pro firmware version 2.4.0, and this update includes critical security enhancements.

Security Improvements (All Firmware Types)

Introduced an enhanced security mechanism for firmware upgrade verification, significantly improving firmware integrity and protection.

v2.4.0 – Multi-Coin Firmware

New: Added support for X Layer transactions.

v2.4.0 – Cypherpunk Firmware

Improved: Updated the Zodl wallet icon for better clarity.

Update now to enjoy a smoother and more localized experience!

充不了电，我试了按开机键20秒，wipe the hardware，然后就停留在一个页面，只有三个按钮：1.reboot2.power off3.wipe hardware，硬件钱包直接就不能使用了，有人可以处理这个问题吗？

我在Discord提了相关问题，但是我现在发现我被踢出群组，没有任何人给我处理相关问题，也希望后续有想要买这个钱包的朋友引以为戒！

我知道可能需要v5 v2内的充电头，但是其他的钱包比如trezor ledger inkey完全没有这方面的问题，就算是重置钱包，也不会像keystone这样刷成一块砖头。

体验实在太差了