Add as a preferred source on GoogleFoundation Says Cloudflare Key Leak Enabled Malicious Emails From Its Domain
The company says it revoked the exposed keys and that Passport hardware wallets and assets stored on them remain safe.
Foundation, the maker of the Passport Bitcoin hardware wallet, said attackers used its official domain to send malicious emails after one or more of its Cloudflare API keys were exposed. The company’s initial investigation traced the incident to the leaked credentials.
Foundation said it revoked all related API keys and shut down the malicious domain included in the phishing emails. It also said Passport hardware wallets were not compromised and that cryptocurrency stored on the devices remains safe.
The exposed credentials were Cloudflare API keys, while Passport is Foundation’s Bitcoin hardware wallet.
Foundation’s investigation is continuing. The company said it plans to publish a detailed report on the incident.
Simon Yoon
ReporterSimon Yoon reports on blockchain technology for TokenPost. Send corrections or tips to info@tokenpost.com.