Bitcoin · Crypto Briefing
Coldcard investigates phishing link posted on its X account after exploit
Compiled by KHAO Editorial — aggregated from 2 sources. See llms.txt for citation guidance.
◎ Multiple-sources
The Bitcoin hardware wallet maker says no unauthorized logins were recorded and has asked X to look into how a fake firmware alert appeared on its feed.
Key facts
- A major exploit in July and August 2026 drained over 1,700 BTC from affected devices, valued at approximately $100M to $130M
- The fraudulent post showed up around 02:00 UTC on October 11, 2026
- The company credits offline two-factor authentication, which it says it has used since 2017
- Join 34,000+ readers across crypto, finance, and policy
Summary
Coldcard, the Bitcoin hardware wallet built by Coinkite, is investigating a phishing post that appeared on its official X account. The company told users not to visit or interact with the link. The fraudulent post showed up around 02:00 UTC on October 11, 2026. The post pointed readers to a domain called migrate.coldcardwallet.io.