FOUNDATION says spoofed-domain spam campaign traced to leaked Cloudflare API keys

FOUNDATION, the developer of the Passport Bitcoin hardware wallet, said it has identified a spam email campaign that impersonated the company’s official domain. According to the company, its investigation traced the emails to one or more compromised API keys on Cloudflare. FOUNDATION said it has since revoked all related keys and that the malicious domain has been taken offline. The company also said funds stored with Passport remain safe and that the hardware device itself was not affected. FOUNDATION added that it is still investigating the incident and plans to release a report as soon as possible. The statement was published on X.