BTC $80,468.00 ▲ 0.32% ETH $2,332.88 ▲ 0.29% BNB $738.82 ▲ 0.35% XRP $1.29 ▼ 0.11% SOL $101.48 ▲ 0.77% TRX $0.3309 ▲ 0.62% FIGR_HELOC $1.06 ZEC $1,230.15 ▲ 3.86% HYPE $77.09 ▲ 1.84% DOGE $0.0772 ▲ 1.13% XMR $588.71 ▼ 2.29% WBT $77.47 ▲ 0.32% LINK $11.47 ▲ 1.37% LEO $9.03 ▼ 0.09%
50 Neutral
Hacks & Security Neutral

Foundation's Passport wallet users targeted by phishing emails

CryptoVideos brief
Built from 3 sources 1 min read Main editor: Earl Jacobson
Foundation's Passport wallet users targeted by phishing emails Image: Unchained
Image via Unchained.

Foundation confirmed that phishing emails appeared to come from its official domains and directed users to a fake site. The messages were linked to compromised Cloudflare API keys and a breach of backend infrastructure, including the support inbox. The company revoked the keys, removed the malicious domain and says funds and the hardware wallet remain safe. Some emails exposed customers' personal details.

Key points

  1. Phishing emails impersonating Foundation's official domains were sent to Passport wallet customers.
  2. The emails were traced to compromised Cloudflare API keys and a breach of Foundation's backend infrastructure.
  3. Foundation revoked the compromised API keys, removed the malicious domain and stated that funds and hardware are not compromised.
  4. Some phishing messages included customers' names, mailing addresses or phone numbers, likely sourced from the support inbox or other leaks.
  5. The malicious domain used in the emails has been taken down.

Why it matters

The incident shows that even hardware wallet providers can be vulnerable to email-based attacks, prompting users to verify communications and avoid sharing seed phrases.

What's unclear

The company has not disclosed how many customers received the phishing emails.
It is unclear whether the attackers accessed Foundation's full customer database.

Sources · 3 publishers

The Defiant Tier 1 First report
Foundation Links Passport Phishing Emails to Compromised Cloudflare API Keys
BeInCrypto Tier 2
Is Your Passport Wallet Safe? What Foundation Says About the Phishing Emails
Unchained Tier 1
Passport Wallet Maker Foundation Traces Phishing Emails to Backend Breach, Promises Report

Coverage timeline

  1. First reported by The Defiant
  2. Also reported by BeInCrypto
  3. CryptoVideos brief published
How this page is checked. AI drafted this brief from selected independent reports. Automated checks compare numbers, source coverage and topic terms, but may miss errors. Publication and evidence refreshes run automatically. Read the linked reports for context. Report an error

Related briefs

CoinDCX confirms a financial loss following old wallet security breach
Hacks & Security

CoinDCX confirms a financial loss following old wallet security breach

2 sources
Initia halts blockchain after attacker mints tokens and converts around $2.6 million
Hacks & Security

Initia halts blockchain after attacker mints tokens and converts around $2.6 million

6 sources
Tesla and SpaceX merger talks spark discussions on Bitcoin treasury holdings
Hacks & Security

Tesla and SpaceX merger talks spark discussions on Bitcoin treasury holdings

2 sources