Coldcard Investigates Phishing Link on X Account After Fake Alert
Bitcoin hardware wallet maker Coldcard is investigating a phishing post on its X account that shared a fake firmware alert.
Coldcard Investigates Phishing Link on X Account After Fake Alert
Bitcoin hardware wallet maker Coldcard is investigating a phishing post on its X account that shared a fake firmware alert.
Coldcard Investigates Phishing Link on Social Media
Bitcoin hardware wallet manufacturer Coldcard is currently investigating a fraudulent post that appeared on its official X account, featuring a fake security warning. The unauthorized message was published around 02:00 UTC on October 11, 2026, according to information from Crypto Briefing. The alert falsely claimed that a critical issue existed regarding seed generation in recent firmware versions.
Users were directed by the post to visit a domain identified as migrate.coldcardwallet.io. Following the appearance of the message, Coldcard swiftly advised its community to avoid clicking or interacting with the link. The company also emphasized that any future updates would only be shared after thorough verification.
Internal Review Finds No Unauthorized Logins
In response to the incident, Coldcard conducted an immediate internal review of its systems and social media controls. The review concluded that no unauthorized access or login events were recorded on the account. The company attributed this baseline security to offline two-factor authentication, a practice it has maintained since 2017.
Because no unauthorized logins were identified internally, Coldcard has formally requested an urgent investigation from X. The hardware wallet provider is pressing the social media platform to determine how the unauthorized post managed to appear on the feed and whether platform-level vulnerabilities or credential compromises were involved.
Context and User Guidance
The fraudulent social media message did not uncover any new firmware vulnerabilities. Instead, it referenced an older security issue that had previously been disclosed earlier in 2026. That prior summer issue involved exploits in July and August 2026 that drained over 1,700 BTC, valued between $100 million and $130 million, from affected users.
So far, no verified user losses have been connected to the recent X post. Industry observers remind users that legitimate hardware wallet firmware updates never require seed phrases to be entered on external websites. Coldcard continues to monitor the situation while awaiting findings from X.
About The Author
