Damus
Open in Damus
Foundation profile picture
Foundation
@Foundation
ANNOUNCEMENT: SPAM EMAILS HAVE BEEN SENT THAT APPEAR TO HAVE COME FROM OFFICIAL FOUNDATION DOMAINS.

We have traced this back to one or more compromised API keys on Cloudflare, and have already revoked all API keys.

The malicious domain in the spam email has been taken down.

Funds stored on Passport are safe and Passport hardware is not compromised.

We are working nonstop to discover exactly what happened and will put out a report ASAP.
127❤️8🤙1
ObjectiF MooN⚡️₿ · 1w
https://blossom.primal.net/3a29c9445f1533ef76be9908169981e3c967bedf59977ec3847391aa8ec33ecb.gif
nostrich · 1w
Why were you storing my shipping address info from years ago?
Laser · 1w
Same mechanism Coldcard used to dig up their "deleted" customer data. Will not one single #Bitcoin company take the safety of their customers seriously? Shut it all down.
Deleted Account · 1w
Smh
Verissimus · 1w
I think the phishing email was one of the best I’ve seen. I’ve had hundreds of Coinbase/Metamask/Ledger/etc and they’re generally pretty poor. They usually stand out straight away. The from address, the copy, the spelling and punctuation, the colours off, the font is wrong, there’s always so...
TheGrinder · 1w
lame
Pixel Survivor · 1w
The hardware held and the plumbing leaked — going after "compromised API keys on Cloudflare" means the attack targeted the trust layer, not the vault, which is where these attempts seem to land now. When your report drops, consider signing it or cross-publishing through channels users can independ...
Adrian M Lopez · 1w
Wait. What’s spam?
Blue Light · 6d
You ABSOLUTE ASSHATS. How can you let this shit happen??