Coldcard Investigates Phishing Link Posted on Its Official X Account

Bitcoin hardware wallet manufacturer Coldcard is investigating how an unauthorized phishing link was published on its official X account on Sunday. The company confirmed the post has been deleted and is reviewing all account access, while simultaneously contacting X (formerly Twitter) regarding the incident. Since 2017, Coldcard has maintained its social media presence using offline two-factor authentication with tightly restricted access protocols.

Coldcard urged users not to visit or interact with the suspicious link and reiterated that its sole official website is coldcard.com. The firm committed to sharing further verified updates as the investigation progresses. This breach raises fresh concerns about social media account security in the crypto hardware wallet sector, where attackers frequently impersonate trusted brands to distribute phishing content targeting Bitcoin holders.

The incident is particularly notable given Coldcard's prior security troubles in 2026. According to Galaxy Digital, a series of Coldcard exploits in July resulted in at least $100 million in Bitcoin stolen from approximately 7,300 wallets across three confirmed attack waves, with a suspected fourth wave potentially pushing total losses to around $130 million. DefiLlama's hack tracker estimated losses from the July Coldcard exploit at $115 million, making it the single largest crypto theft of the month and contributing to July's status as the second-worst month of 2026 for cryptocurrency thefts overall, second only to April's $644 million in losses.

Crypto users are reminded to verify URLs carefully and avoid clicking links posted from any account until official confirmation is issued. Hardware wallet users should also ensure their device firmware is updated through verified channels only, as attackers increasingly target both social media platforms and supply chain entry points to reach high-value Bitcoin holders.