FOUNDATION: Official domain impersonated to send spam emails, Passport hardware wallet remains unaffected

on October 26, Foundation, the developer of the Bitcoin hardware wallet Passport, stated that spam emails recently disguised as originating from its official domain have been circulated. The team's investigation indicates the incident may be linked to one or more leaked Cloudflare API keys. All relevant API keys have been revoked, and the malicious domains involved in the emails have been shut down.

Foundation confirmed that the funds stored in Passport hardware wallets remain secure and that the Passport hardware devices themselves have not been compromised. The team continues to investigate the cause of the incident and has pledged to release a detailed report as soon as possible.