COLDCARD Says Official X Account Posted Phishing Link After Suspected Compromise

COLDCARD’s official X account appears to have been compromised after posting a fake security notice that directed crypto users to a phishing site posing as a wallet migration guide.

The post was deleted, and COLDCARD said it found no corresponding login, session or access records. The hardware wallet maker also said its account credentials and offline two-factor authentication remain secure.

Based on those findings, COLDCARD suspects the attacker may have obtained access at the X platform or administrator level. The company has asked X’s security team to investigate urgently.

The incident creates an immediate risk for users who may mistake fraudulent migration instructions for an official COLDCARD security update.