FOUNDATION says spoofed-domain spam campaign traced to leaked Cloudflare API keys

FOUNDATION says spoofed-domain spam campaign traced to leaked Cloudflare API keys

N
News Editor
2026-10-26 05:33:57
FOUNDATION, the developer of the Passport Bitcoin hardware wallet, said it has identified a spam email campaign that impersonated the company’s official domain. According to the company, its investigation traced the emails to one or more compromised API keys on Cloudflare. FOUNDATION said it has since revoked all related keys and that the malicious domain has been taken offline. The company also said funds stored with Passport remain safe and that the hardware device itself was not affected. FOUNDATION added that it is still investigating the incident and plans to release a report as soon as possible. The statement was published on X.

FOUNDATION, the company behind the Passport Bitcoin hardware wallet, said it has detected spam emails masquerading as messages from its official domain.

In a statement posted on X, the company said its investigation traced the emails to one or more leaked API keys on Cloudflare. FOUNDATION said it has revoked all related keys, and the malicious domain has been shut down.

The company also said funds stored on Passport remain safe and that the hardware itself was not affected. FOUNDATION added that it is continuing to investigate the incident and will publish a report as soon as possible.

This article was originally published by Bit.Fan. For more cryptocurrency news and market insights, visit www.bit.fan.
100

Disclaimer:

The market information, project data, and third-party content displayed on this platform are for industry information sharing only and do not constitute any form of investment advice or return commitment.

Cryptocurrency trading carries high risks. Users should fully assess their risk tolerance and make independent decisions. All profits, losses, and legal responsibilities are borne by the users themselves.