TLDR;
Keys were fine.
Smart contract had a backdoor.
Examine your counterparties.
+|- list & SUMit uP/3rd parties are liabilities