If someone suddenly offers to give you a free hardware wallet replacement, don’t rush to accept this “after-sales service.” This morning, I saw CZ share Keystone’s official statement, so I read the original. According to the manufacturer’s disclosure, the compromised data included customers’ names, shipping addresses, and order details—but mnemonic phrases and private keys were not part of this breach. What concerns me most is the subsequent warning: scammers may impersonate official representatives and contact users under the guise of refunds or device replacements. The manufacturer specifically emphasized: never enter your mnemonic phrase into any device you did not personally order. The whole point of buying a hardware wallet is to secure your assets more safely—yet risks could still emerge through shipping or after-sales channels, and this detail is easily overlooked. I think it’s valuable that CZ shared this warning. If you receive a so-called “replacement device,” verify it through official channels you’ve found independently—don’t follow instructions included in the package to restore your wallet. At this stage, this is a risk advisory issued by the manufacturer; there is no confirmed case yet of fake devices being mailed out to steal funds.