Foundation confirms spam from its domains after Cloudflare API keys compromised; CEO cites app flaw

Foundation confirmed spam was sent from its official domains after Cloudflare API keys were compromised, revoking all keys and taking down the malicious domain. CEO Zach Herbert said attackers used a flaw in a self-hosted app and exploited historical customer records the company believed deleted, fueling over 23,000 phishing emails seeking Passport wallet seed phrases; hardware and funds remain safe.

Detected & updated continuously · Source: Nebula