Foundation CEO Zach Herbert disclosed that attackers exploited a vulnerability in a self-hosted application to gain access to the support inbox, enabling phishing emails targeting Passport users. Initial reports had attributed the breach to compromised Cloudflare API keys, but Herbert's later clarification identified the self-hosted app flaw as the likely entry point. The incident highlights ongoing security risks facing crypto wallet providers and their customer communication channels.