sec_₿sec.21ideas.org
keystone nexus app · Keystone
Exploitation confirmedHodlers6 November 2026

Keystone: Nexus App services hit by cyberattack; app version 1.3.7 released

Keystone says some Nexus App services were recently hit by a cyberattack, and for a period some users could not use the app normally. The team responded and hardened server security. Based on the vendor's investigation so far, there is no evidence that user assets or personal information were affected. Version 1.3.7 adds further security hardening. It is live on Google Play for Android, and the iOS version is, per the vendor, awaiting App Store review.

Actions to take

If you use Nexus App on Android, update to 1.3.7 via Google Play as soon as possible. On iOS the update is not yet available; until it is, the vendor suggests signing with any third-party wallet from Keystone's supported list. Before installing, check that the developer is listed as "Yanssie HK Limited"; the vendor says anything else is not theirs. Never enter your seed phrase or private keys into a lookalike app or at the request of "support".

Incident history

  1. 06 NovKeystone: Nexus App services hit by cyberattack; app version 1.3.7 released
  2. 07 NovKeystone: Nexus App update for iOS is now available