Coldcard Removes Phishing Post From Official X Account
Coldcard deleted a phishing post from its official X account on Oct. 11, 2026, while maintaining that its login credentials and two-factor authentication were secure.
A post on Coldcard’s official X account directed users to a phishing link on Oct. 11, 2026, according to Bitcoin.com News. The message used a false claim about a critical firmware flaw to target customers.
Coldcard removed the post and said its account credentials and two-factor authentication remained secure. The available report does not explain how the unauthorized message was published.
The incident follows a separate seed-generation failure in July that reportedly left thousands of wallets exposed. The source does not establish a connection between that failure and the phishing post.
Source: Bitcoin.com News
