Hardware wallet maker Keystone patched a website vulnerability that exposed customer order details and addresses, while confirmation shows private keys and funds remain safe.