Foundation revokes compromised Cloudflare API keys; malicious domain taken down
BIBIBI
AT A GLANCE
Foundation said its official domain had been used to send spam, and the relevant Cloudflare API keys have been revoked.
Article
Bitcoin hardware wallet manufacturer Foundation’s official domain abused to send spam
PANews October 26 reported, citing Teh Block, that open-source Bitcoin hardware manufacturer Foundation said it had discovered spam being sent through its official domain. The company traced the issue to one or more compromised Cloudflare API keys; these keys have now been revoked. In addition, the malicious domain used in the emails has been taken down. Foundation emphasized that funds stored in Passport devices remain secure and that the hardware itself was not compromised.
Foundation said it had discovered spam being sent through its official domain.
03
Foundation traced the issue to one or more compromised Cloudflare API keys.
04
The relevant keys have been revoked, and the malicious domain used in the emails has been taken down.
05
Foundation emphasized that funds in Passport devices remain secure and that the hardware itself was not compromised.
AI-assisted interpretation
The following is analysis, separate from reported facts. Verify important claims independently.
Someone used permissions associated with Foundation’s official domain to send spam. Foundation said the issue involved compromised Cloudflare API keys and stated that the keys had been revoked and the malicious domain taken down; it also said that Passport devices and the funds in them were not affected.
Why it matters to readers
Emails from an official domain are more likely to be trusted by users, so domain abuse may increase the risk of mistakenly trusting spam or malicious links.
If you use Passport or receive an email from a Foundation domain, carefully verify the email’s contents; the original report did not state that any devices or funds had been damaged.
Risks and unknowns
The original report did not specify the number of affected emails, their recipient scope, or their specific content.
The original report did not specify which Cloudflare accounts or permissions were affected.
The statements regarding the root cause and the lack of impact on devices and funds were not accompanied by independent technical investigation findings.
The original text does not state whether any users have already suffered losses due to the relevant emails.
Related Developments
Loading event timeline…
Related concepts
Cloudflare API Keys
This term is not in the glossary yet. Browse related concepts in the glossary.
