Foundation says compromised Cloudflare keys were used to send phishing emails

The Passport maker says it revoked its API keys and took down the malicious domain, while asserting that customer funds and hardware remain safe.

RuntimeWire · 2026-10-26T04:42:28.066Z