X Gets Wave of Reset Emails, Crypto Accounts on Alert
Thousands of users, including crypto accounts, received unsolicited reset emails. X sees no evidence of a hack, but extra security is recommended.
Key Takeaways
- Thousands of X users are reporting unsolicited password reset emails, including several well-known crypto accounts.
- There is still no evidence that X was hacked or that large-scale account takeovers took place.
- X users are being advised to turn on Password Reset Protect to add extra security to reset attempts.
Thousands of X users are reporting a wave of unsolicited password reset emails, including several well-known crypto accounts. The reports are raising concerns about a possible account takeover attempt, but there is still no evidence that X itself was hacked. Some users received as many as ten emails within a few hours.
Crypto Reacts Quickly
X plays a major role in the crypto market because traders, projects, and executives often use the platform for announcements, market commentary, and breaking news. That is exactly why these kinds of reset emails stand out in the sector. Crypto investor Nic Carter said Tuesday that many people received unsolicited reset attempts and urged users to turn on Password Reset Protect.
cap.eth also reported that someone aggressively tried to reset his password, despite two-factor authentication. That shows that an extra layer of security does not always remove all risks, even if it does make a takeover harder.
How the Reset Emails Work
According to X's security terms, a password reset can be started using only a public username. After that, X itself sends the reset email to the email address linked to the account. Password Reset Protect adds an extra step, where the person requesting the reset also has to confirm the account's email address or phone number.
At least four CoinDesk employees said Tuesday that they received similar emails. For two of them, the emails were tied to addresses that were not widely known. That does not automatically mean attackers already have access to those addresses, but it does make the reports more notable.
Why This Matters
For European crypto followers, this is especially relevant because X is an important communication channel for many projects and traders. If reset attempts are aimed at accounts with a large reach, that can quickly lead to confusion or abuse of trust. For now, however, there is no confirmed sign of a breach in X's systems or of large-scale account takeovers.
