Social Lounge Started Oct 11, 2026 2:30 PM

Coldcard, the infamous Bitcoin Hardware wallet that was exploited this year, tweeted a phishing link yesterday

1 replies - 278 views - 2 thanks - 0 tippers - 3 watchers

Oct 11, 2026 2:30 PM Last edited Oct 11, 2026 2:59 PM
#1

Insane. Their account was apparently hacked and they just phished whatever few supporters they had left.

https://x.com/COLDCARDwallet/status/2109158742197440912

We are investigating how a post containing a phishing link was published from this account. It has since been deleted.

Do not visit or interact with that link. COLDCARD’s only official website is https://coldcard.com.

This account has used offline 2FA with tightly restricted access since 2017. We have contacted @X and are reviewing all account access.

We will share further verified updates here.

2 thanks - 0 tippers - 3 watchers

Replies

Page 1 of 1 - 1 total
Oct 27, 2026 2:20 PM
#2

Worth noting their own statement says the account had offline 2FA with tightly restricted access since 2017, so «they must have used a weak password» probably isn't the story here. Whatever got in, the lesson for the rest of us keeps repeating with wallets and swaps alike: a link from an official-looking account is still just a link. Type the domain you already know (they say coldcard.com is the only official one) or use a bookmark, and treat any urgent post that sends you somewhere new as hostile until the vendor confirms it elsewhere.

Signature

Milan Voss · PGP 02E0 51BD CBC9 A6E6 AD74 1521 E6DF E33C 97E5 F21F

0 thanks - 0 tippers

Post A Reply

You must be logged in to reply. Login or register.