A phishing post appeared on Coldcard’s official X account on October 11, 2026, around 02:00 UTC, masquerading as an urgent security warning about a seed generation issue in recent firmware and redirecting users to migrate.coldcardwallet.io. The Bitcoin hardware wallet maker conducted an internal review that found no unauthorized access or logins on the account, crediting its offline two-factor authentication used since 2017. Coldcard has requested an urgent investigation from X to determine how the post was published. No user losses have been reported so far, though the incident follows a major exploit in July and August 2026 that drained over 1,700 BTC, valued at approximately $100M to $130M.
Source: Read the original article
Disclaimer: this content is for information purposes only and is not financial advice. Cryptocurrencies are highly volatile: you may lose all of your capital. Always do your own research. Legal notice
