COLDCARD Investigates Unauthorized Phishing Post on Official X

Bitcoin hardware wallet manufacturer COLDCARD has launched an investigation after an unauthorized phishing message appeared on its official X account on October 11, directing users toward a fraudulent wallet security website. The company deleted the post after the incident.

According to CryptoNews, the unauthorized post claimed firmware vulnerabilities and directed Bitcoin holders toward fraudulent migration instructions. COLDCARD stated that its official account has relied on offline two-factor authentication and restricted access since 2017. The company contacted X after finding no matching login or session records.

Account Access Review

Following the removal of the post, COLDCARD examined its account security and requested assistance from X. The manufacturer noted that it could not identify a login, session, or access record corresponding to the unauthorized publication. COLDCARD raised the possibility of unauthorized access involving platform-level systems or administrative privileges, though it noted that a platform-level compromise remains an unconfirmed possibility.

No verified financial losses or confirmed explanations for the account incident have been publicly established. The manufacturer emphasized that its only official website is coldcard.com and urged customers not to interact with the fraudulent link.

Key facts

• An unauthorized phishing message appeared on COLDCARD's official X account on October 11.
• The post directed Bitcoin users to a fake wallet security page claiming firmware vulnerabilities.
• COLDCARD stated its account uses offline two-factor authentication and restricted access dating to 2017.
• No verified financial losses have been publicly established from the incident.