Foundation Devices is the latest hardware wallet manufacturer to be affected by a security incident. Fake emails are going out to customers claiming that their hardware wallets have been compromised. The emails include customers' names and addresses, so at the very least customer data has now been leaked. Foundation Devices states no hardware wallet compromise exists and funds are not at risk.
Foundation have stated that the emails appear to have originated from official Foundation domains. "We have traced this back to one or more compromised API keys on Cloudflare, and have already revoked all API keys." The situation is still developing. Full details are still unknown.
ANNOUNCEMENT: SPAM EMAILS HAVE BEEN SENT THAT APPEAR TO HAVE COME FROM OFFICIAL FOUNDATION DOMAINS. We have traced this back to one or more compromised API keys on Cloudflare, and have already revoked all API keys. The malicious domain in the spam email has been taken down.…
hardware wallets only make sense if they are part of a multsig and possible to DIY from off the shelf parts like raspberries and esp32's
otherwise you are painting a giant target on yourself
the foundation phone really looks like an old feature phone ( maybe with surprise 4g modem included? )
These hardware wallet manufacturers just can't catch a break, can they?
its been a brutal year for them