← All reports

Mastodon.cloud Shutdown Imminent: Security Flaws and Corporate Links Exposed

Fediverse & CommunityApr 19, 2026score 2.235 posts · 20 replies across 3 instances
Fosstodon announced the 72-hour defederation of mastodon.cloud due to documented server neglect. This move was supported by security warnings from [email protected], which stated the instance operates with outdated software versions, specifically citing Mastodon 4.1.25, and confirmed its abandoned status. The community is split on procedure. Some users, including [email protected], view immediate defederation as an act of self-defense against risk. Conversely, [email protected] argues that responsible practice necessitates a notice period measured in 'weeks,' not days, for instances with existing user bases. An outlier observation from [email protected] pointed to a possible corporate link between the administrators of pawoo.net, mstdn.jp, and mastodon.cloud. The weight of evidence points to the immediate necessity of disconnecting from mastodon.cloud because of its operational failures and persistent spam. While the functional de-federation seems settled, the core disagreement remains the standard of care: whether safety trumps formal notice period protocol.

Key points

SUPPORT
The instance is running vulnerable and outdated software, necessitating defederation.
[email protected] confirmed the use of outdated software and insecure status.
OPPOSE
A 72-hour notice period was deemed insufficient for responsible network withdrawal.
[email protected] argued that responsible practice requires 'a few weeks notice at least'.
SUPPORT
The defederation is framed by some users as a necessary act of defense.
[email protected] characterized the severing of ties as an 'act of self-defense'.
MIXED
Administrators of multiple major instances may share ownership.
[email protected] noted that the owners of pawoo.net and mstdn.jp are connected to the owners of mastodon.cloud.
SUPPORT
The instance suffers from unmanaged spam and content proliferation.
[email protected] detailed persistent, unmanaged spam and inappropriate content originating from the site.

Source posts

@[email protected]
Hi all, we've made the decision to defederate with mastodon.cloud, due to the unfortunate neglect of the server. Mastodon.cloud was already limited by Fosstodon. We will complete the defederation in 72 hours. Please reach out to accounts you still follow on mastodon.cloud and encourage them to move, while you can still contact them as the defederation will break your follow.
217 boosts · 103 favs · 13 replies · Apr 18, 2026
@[email protected]
RE: https://fosstodon.org/@fosstodon/116426844488528606 🚨 metalhead.club has also considered suspending mastodon.cloud permanently. That instance is very outdated (has not received any updates for a year!) and has recently been origin of a spam wave, that could abuse the Fediverse unhamperedly. it's unmoderated! For now there has been silence, because metalhead.club has blocked the bad actors. But it will happen again. The mastodon.cloud administrators have not shown any reaction to my requests and the requests of other admins. It's an abandoned place. Please switch to other instances, if you have your account on mastodon.cloud. 🙏 metalhead.club will not block mastodon.cloud today, but maybe soon.
6 boosts · 4 favs · 0 replies · Apr 18, 2026
@[email protected]
This site, Mastodon.cloud, is not secure. It has been abandoned and is currently running outdated software with a known security vulnerability. Please migrate to an alternative site. Mastodon.cloud is also being de-federated, meaning it is being disconnected from the rest of the Fediverse. In the future, other Mastodon and Misskey sites will no longer communicate with Mastodon.cloud. Details concerning this version of Mastodon 4.1.25. https://github.com/mastodon/mastodon/releases/tag/v4.1.25 #Mastdon #Misskey #Fediverse
22 boosts · 0 favs · 4 replies · Apr 18, 2026
#mastdon#misskey#fediverse
@[email protected]
This site, Mastodon.cloud, is not secure. It has been abandoned and is currently running outdated software with a known security vulnerability. Please migrate to an alternative site. Mastodon.cloud is also being de-federated, meaning it is being disconnected from the rest of the Fediverse. In the future, other Mastodon and Misskey sites will no longer communicate with Mastodon.cloud. Details concerning this version of Mastodon 4.1.25. https://github.com/mastodon/mastodon/releases/tag/v4.1.25 #Mastodon #Misskey #Fediverse
1 boosts · 0 favs · 0 replies · Apr 18, 2026
#mastodon#misskey#fediverse
@[email protected]
This site, Mastodon.cloud, is not secure. It has been abandoned and is currently running outdated software with a known security vulnerability. Please migrate to an alternative site. Mastodon.cloud is also being de-federated, meaning it is being disconnected from the rest of the Fediverse. In the future, other Mastodon and Misskey sites will no longer communicate with Mastodon.cloud. Details concerning this version of Mastodon 4.1.25. https://github.com/mastodon/mastodon/releases/tag/v4.1.25 #Mastdon #Misskey #Fediverse
1 boosts · 0 favs · 0 replies · Apr 18, 2026
#mastdon#misskey#fediverse