Bitcoin wallet maker Coldcard says a phishing link was posted from its official X account. Here's what users need to know.
A trusted Bitcoin company's social media account may have been compromised — and users are being warned to stay away from a dangerous link.
Coldcard, a company that makes hardware wallets (physical devices, like a USB stick, used to store Bitcoin safely offline and away from hackers), says a suspicious link appeared on its official X (formerly Twitter) account on Sunday.
The link was a phishing link — a fake web address designed to trick people into giving away their private information or money. Clicking such links can let criminals steal your crypto. The post has since been deleted.
What Coldcard is telling users:
- Do not click or interact with the link that appeared.
- The company's only official website is https://coldcard.com.
- Coldcard is investigating how the post was published and has contacted X directly.
- The company says it uses offline two-factor authentication (an extra login security step kept offline) and has restricted account access since 2017.
This news is especially worrying because Coldcard has already had a rough year. Earlier in 2026, hackers exploited a weakness in Coldcard's systems, leading to major losses.
Key numbers from the earlier Coldcard hack:
- At least $100 million in Bitcoin stolen from around 7,300 wallets across three attack waves, according to Galaxy Digital.
- A suspected fourth wave could push total losses to about $130 million.
- July 2026 became the second-worst month for crypto theft this year, with $247.4 million stolen overall — second only to April's $644 million.
The bottom line: If you own a Coldcard wallet or follow the company online, be extremely careful. Never click links from social media without double-checking they lead to the real, official website. When in doubt, type the web address yourself rather than clicking a link.
This is an AI-generated summary. Read the original article at: https://cointelegraph.com/news/coldcard-says-its-investigating-how-phishing-link-appeared-on-its-x-account?utm_source=rss_feed&utm_medium=rss&utm_campaign=rss_partner_inbound