Coldcard Investigates Appearance of Phishing Link on Its X Account
Bitcoin-only hardware wallet Coldcard reported that a phishing link appeared on its official X account, despite employing offline two-factor authentication and restricted access since 2017. The company is investigating how the malicious post was published and later removed. Users were warned against visiting the link, with Coldcard’s official website confirmed as coldcard.com.
Phishing Link Incident and Company Response
On Sunday, a phishing link appeared on Coldcard’s official X social media account. The company promptly deleted the post and initiated an investigation to determine how the malicious link was published, despite stringent security measures including offline two-factor authentication established since 2017.
Coldcard advised users to avoid clicking or interacting with the link and reminded that its sole official website is https://coldcard.com. The company has contacted X’s support and is reviewing all access to the account, promising to share any further verified information as it becomes available.
Industry Context and Significance of the Incident
Earlier, Cointelegraph reported July as the second-worst month in 2026 for cryptocurrency thefts, largely due to a Coldcard exploit. Approximately $247.4 million worth of crypto was stolen in July, marking the second-highest monthly total after $644 million in April, per DefiLlama data.
Hackers executed at least three confirmed waves of attacks, stealing around $100 million in Bitcoin from about 7,300 wallets. Galaxy Digital identified a suspected fourth wave, potentially raising total losses to about $130 million. DefiLlama’s hack tracker estimates the Coldcard-related losses at $115 million.
Why it matters
The news about a phishing link appearing on Coldcard’s official account is significant because the company markets itself as a secure hardware wallet with strong account protection mechanisms. This incident raises concerns within the crypto community, given the scale of stolen funds and the fact that even highly secured projects can be targeted by sophisticated attacks. Coldcard’s investigation and transparent communication aim to maintain user trust and highlight the ongoing necessity for vigilant security monitoring and improvements in the industry.
Prepared from the source material with AI-assisted editing and checked against the supplied facts.
Open original source ↗