# Foundation Says Cloudflare Key Leak Enabled Malicious Emails From Its Domain

By Simon Yoon

Canonical URL: https://www.tokenpost.com/news/technology/40813
Published: 2026-10-26T05:33:46.000Z
Updated: 2026-10-26T05:33:46.000Z
Section: Technology

> The company says it revoked the exposed keys and that Passport hardware wallets and assets stored on them remain safe.

Foundation, the maker of the Passport Bitcoin hardware wallet, said attackers used its official domain to send malicious emails after one or more of its Cloudflare API keys were exposed. The company’s initial investigation traced the incident to the leaked credentials.

Foundation said it revoked all related API keys and shut down the malicious domain included in the phishing emails. It also said Passport hardware wallets were not compromised and that cryptocurrency stored on the devices remains safe.

The exposed credentials were Cloudflare API keys, while Passport is Foundation’s Bitcoin hardware wallet.

Foundation’s investigation is continuing. The company said it plans to publish a detailed report on the incident.