Back Kucoin

Coldcard Official X Account Compromised; Phishing Link Posted

Kucoin • October 11, 2026

ME News reports that on October 11 (UTC+8), Coldcard announced it is investigating the posting of a phishing link on its official X account; the relevant post has been removed, and users are advised not to access or interact with the link.

The account has used offline two-factor authentication (2FA) since 2017 and has strictly limited access permissions. Coldcard has contacted the X platform and is reviewing all account access logs; verified updates will be shared via the official account. (Source: BlockBeats)

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

COLDCARD Investigates Phishing Scam on Official X Account On October 11, 2026, COLDCARD's official X account posted a phishing link disguised as a security alert, prompting users to migrate their Bitcoin to a fraudulent site. The post claimed a critical vulnerability in the seed-generation process, exploiting fears from a prior $130 million theft incident in July 2026. COLDCARD confirmed no unauthorized logins or access records were found during their internal review, suggesting a possible platform-level compromise. The company has contacted X for an investigation and advised users against interacting with the phishing link. No confirmed financial losses have been reported as a result of this incident. Security experts warn that the phishing attempt is designed to collect recovery phrases from unsuspecting users. The incident highlights the ongoing risks associated with social engineering in the cryptocurrency space. 21 sources 57

Coldcard Official X Account Compromised; Phishing Link Posted

The full story

Extracted Entities

Attack Types (1)

Companies (1)

MITRE ATT&CK (1)