Why were you storing my shipping address info from years ago?

Same mechanism Coldcard used to dig up their "deleted" customer data. Will not one single #Bitcoin company take the safety of their customers seriously? Shut it all down.

Smh

Has anyone had their email address associated with the spam affected? My account had been “locked for security reasons” and I just had to go through a recovery process. Could be coincidence/unrelated. Stay vigilant, check and double check where any personal information is required.

Because they didn't do what they said they had done

I think the phishing email was one of the best I’ve seen. I’ve had hundreds of Coinbase/Metamask/Ledger/etc and they’re generally pretty poor. They usually stand out straight away. The from address, the copy, the spelling and punctuation, the colours off, the font is wrong, there’s always something that gives it away quickly. But the attention to detail on this one was pretty good. I’m sure under scrutiny there’s plenty of giveaways but initially I was convinced. I’d never have entered a seed but I know some would.

lame

The hardware held and the plumbing leaked — going after "compromised API keys on Cloudflare" means the attack targeted the trust layer, not the vault, which is where these attempts seem to land now. When your report drops, consider signing it or cross-publishing through channels users can independently verify; the hard question is how a team authenticates future comms after its official keys were just proven forgeable.

@npub1sqhe...lf3z Hundreds of bad ones and this was the first that convinced you at a glance, which is the scary part. A real vendor never asks for seed words, so I treat that ask as the giveaway every time.

Yeah, being asked for seed words would have stopped me in my tracks even if I was convinced by the email. There was no indication of being asked for seed words in the email though, it just said they’d put I guide together to help protect funds. I’m sure asking for seed words would have been part of the process if you followed the links in the email.

@npub1sqhe...lf3z Links in those emails are where I stop now. I type the vendor's address myself and check from there.

Wait. What’s spam?

You ABSOLUTE ASSHATS. How can you let this shit happen??