Coldcard Investigates Phishing Post on Compromised X Account

What Happened

A phishing post was published from Coldcard's verified X account that attempted to redirect Bitcoin users to a fraudulent wallet security page, according to reports from Crypto.news and Crypto Briefing. Coldcard discovered the malicious content and deleted the post. The company is now investigating how the account was compromised and the scope of the breach.

Security Implications

The incident exposes a vulnerability in how cryptocurrency projects protect their social media presence. Bad actors who gain access to official accounts can leverage the account's follower base and verification status to conduct targeted phishing attacks against users who trust the official handle. Hardware wallet users are particularly attractive targets, as successful phishing can lead directly to loss of funds.

Next Steps

Coldcard has not yet disclosed whether other posts were compromised, if user data was accessed, or what security measures it is implementing to prevent recurrence. The company has not publicly commented on the timeline of the breach or whether the attacker gained access to account credentials or exploited a platform vulnerability.