The Nostr Observer

Compromised Cloudflare Key Triggers Phishing Wave Aimed at Hardware Wallet Holders

Foundation revokes Cloudflare access credentials after malicious emails impersonating the hardware maker circulate, alleging tampered display modules while hardware and funds remain intact.

By Staff Reporters · Dispatches from the network

Holders of Passport hardware signing devices awoke Monday morning to urgent security advisories following an unauthorized email broadcast transmitted through official service channels. The company moved swiftly to contain the breach, issuing an all-caps advisory to customers: ANNOUNCEMENT: SPAM EMAILS HAVE BEEN SENT THAT APPEAR TO HAVE COME FROM OFFICIAL FOUNDATION DOMAINS. [s1] The attack vector was isolated within hours to cloud configuration tokens: We have traced this back to one or more compromised API keys on Cloudflare, and have already revoked all API keys. [s1] The malicious domain referenced in the deceptive mailings was taken down, and the manufacturer emphasized that physical devices and cryptographic secrets remained unbreached: Funds stored on Passport are safe and Passport hardware is not compromised. [s1]

The deceptive emails attempted to convince recipients that their hardware had suffered supply-chain tampering prior to delivery. Community members quickly sought clarification across relays. Sir Double T reported receiving a message claiming a display module was modified before it got to them [s20], before confirming the fraudulent nature of the dispatch to fellow node runners: Not that I’m aware of, but the email is a phishing scam. [s29] Foundation followed up with simple operational instructions for all registered users [s51]: Please do NOT click the links.

The incident coincided with a broader cluster of infrastructure updates across open-source custody tooling. Security researcher Flix circulated a formal GitHub security advisory for the Electrum wallet (GHSA-6jp4-8v48-cc5v) [s290] addressing an internal vulnerability. Meanwhile, Blockstream reminded node operators that legacy Electrum server ports hosted on blockstream.info will cease serving data on November 9, 2026 [s276], requiring users to transition to modern secure endpoints. As Freedom.Tech observed in a review of cross-stack dependencies [s564], centralized cloud services and compromised authority keys continue to expose distributed networks to social engineering and operational friction.

Bitcoin Tests $80,000 Support One Year Following Record Peak

With spot prices down 36 percent from the record set in October 2025, market analysts parse the mechanics of Sunday margin liquidations against an inflexible issuance schedule.

By Roger and markusturm · Dispatches from New York and Berlin

Bitcoin hovered near psychological support early Monday, consolidating after a sharp weekend slide liquidated leveraged derivatives contracts across major exchanges. In an exhaustive review of trading conditions, Roger noted the milestone: Bitcoin trades at $80,209 this morning. The all-time high was $126,080 on 6 October 2025, which puts the price 36.4 percent below the record, set almost exactly one year ago. [s574] In Berlin, markusturm tracked more than $150 million in long liquidations in four hours as spot prices breached the $80,000 boundary [s559], compounded by macroeconomic pressures as Brent crude oil touched an eight-month high of $116.

Addressing the recurrent tendency of leveraged trades to unwind violently outside traditional banking hours, Roger distinguished between theoretical monetary attributes and raw market mechanics: During a margin call, the asset you can sell at three in the morning on a Sunday is the asset that gets sold. That says more about liquidity than about monetary properties. [s574] The post-halving landscape has also challenged simplistic supply-model predictions: The halving does exactly one thing: it halves the flow of new supply. It says nothing about demand, and demand set this year's price. [s574]

Despite shifting speculative tides and institutional ETF flows, the underlying network ledger continues its deterministic cadence without interruption: The price this morning is $80,209. It will be something else by the time you read this, and the ledger will not have moved. [s574]

Mostro Unveils Serbero to Assist Dispute Resolution

Mostro announced the release of Serbero, a dedicated modular assistant engineered to support dispute resolution teams operating lightning peer-to-peer exchange nodes [s48]. As the project explained, Serbero is the assistant that backs up the dispute team on Mostro, automatically detecting open disputes, sending persistent alerts to designated solvers, and gathering preliminary transaction evidence from counterparties when mediation is active.

The system is designed with strict boundaries to ensure non-custodial integrity: The final call always stays with a human solver, and Serbero never moves funds. [s48] Node operators can optionally deploy the service alongside existing node daemon runners.