Foundation Attributes Passport Wallet Phishing Emails to Backend Breach

The revision from compromised Cloudflare keys to a self-hosted app entry point matters because it shifts the exposure from a third-party provider to Foundation's own infrastructure — a harder problem to remediate and a signal that the customer support inbox is a live attack surface for wallet providers. This affects Passport users who received the phishing emails, and more broadly any self-custody wallet relying on support workflows that touch user data. Whether Foundation's promised report details the scope of inbox access, and whether other wallet makers audit similar self-hosted support tooling, are the open questions worth watching.