SummaryThousands of X users, including prominent cryptocurrency accounts and CoinDesk staff members, reported receiving unsolicited password-reset emails on Tuesday.The emails do not necessarily indicate that attackers obtained users’ addresses because X allows anyone to initiate a reset request with a public username.Users can enable Password Reset Protect to require confirmation of an account’s email address or phone number, though there is no confirmed evidence of a breach or widespread account takeovers.Thousands of X users are reporting a wave of unsolicited password reset emails, including several prominent crypto accounts, raising concerns about an attempted account-takeover campaign or possible leak. Individual users received as many as 10 emails within a few hours. X has an outsized role in the crypto industry, as traders, projects and executives use it as a primary channel for announcements, market commentary, niche trading ideas and breaking news.Crypto investor Nic Carter said Tuesday that “a lot of people” were receiving unsolicited reset attempts and urged users to switch on X’s Password Reset Protect feature. Another crypto user, cap.eth, said someone had been “aggressively” attempting to reset his password despite having two-factor authentication enabled.A lot of people getting unsolicited X password reset attempts in their email inbox. Do the following: go to X settings -> security and account access -> security -> check "password reset protect" https://t.co/mOCZCYL7uj— nic carter (@nic_carter) September 1, 2026