Abnormal Password Reset Emails Affect Thousands of X Users, Multiple Crypto Industry Accounts Receive Requests

Odaily News, September 1st — Thousands of X users have reported receiving password reset emails that they did not initiate, including multiple crypto industry accounts and some media professionals. Some users received up to 10 such emails within a few hours. Crypto investor Nic Carter stated that a large number of users are receiving X password reset requests, and recommended enabling X's "Password Reset Protect" feature. Crypto user cap.eth said that even with two-factor authentication enabled, someone is still attempting to reset their password. There is currently no evidence that X's platform systems have been compromised or that a large-scale account takeover has occurred. X's security mechanism allows attackers to initiate a password reset request using only the public username, after which X sends a reset email to the linked email address. Therefore, receiving such an email does not necessarily mean that the user's email address has been leaked. X has not yet publicly responded to this abnormal wave of password reset requests, nor has it confirmed the existence of a coordinated attack campaign or security incident. Industry insiders advise users to review their account security settings and enable the password reset protection feature.