Passport maker Foundation says compromised Cloudflare API keys sent phishing from its domains

There have been scam emails sent from Foundation’s domains. The company that made the Passport Bitcoin hardware wallet has traced them to at least one leaked Cloudflare API key. It revoked all API keys late on October 25 and said that Passport devices and the Bitcoin they hold are safe. Passport funds are safe, the company said at 11:47 p.m. ET At 11:47 p.m. ET, Foundation put the warning on X. Spam that seemed to come from official Foundation domains had already been going around, and the bad domain it contained was shut down. Software can use an API key to access an account without a password. With just one leak, whoever has it can get in.

BeCrypto News shows a short excerpt and links to the publisher. The full report belongs to Cryptopolitan.