Is this a real threat or just noise?
X reports mass password reset attempts targeting users following X Money’s launch, but notably claims no evidence of successful breaches — a distinction that matters, since the company hasn’t posted official confirmation or responded to press inquiries, leaving the scope of the attack unclear.
What does this mean for X Money’s credibility?
The timing is suspicious: attackers apparently believe the new payments service makes accounts more valuable, yet X’s silence on official channels and reliance on a product engineer’s post and Grok’s responses raises questions about whether the company is downplaying the incident while it investigates.
Should users be worried about their funds?
X is urging 2FA adoption and threatening legal action, but with no confirmed breach and no official statement, the prudent move is caution — the attack vector (mass password reset forms) suggests phishing or credential stuffing, not a platform compromise, though the lack of transparency doesn’t inspire confidence.