COLDCARD Investigates Phishing Post on Official X Account After Previous 1,789 BTC Theft
COLDCARD is investigating a phishing incident after a malicious link was published from its official X account, despite the company reportedly maintaining offline two-factor authentication (2FA) and tightly restricted account access since 2017. The incident has raised questions about how the unauthorized post appeared and whether users could be exposed to further security risks.
According to information shared by Coin Bureau, the deleted post presented itself as an “URGENT COLDCARD SECURITY UPDATE” and urged users with affected wallet seeds to “begin a careful migration now.” COLDCARD said it had contacted X and was reviewing all account access following the incident.
Phishing Message Impersonated a Security Warning
The deleted message used urgent security language to encourage users to take action involving their wallet seed information. Such messaging can be a warning sign of phishing, particularly when a post directs cryptocurrency holders to follow a link while claiming that their funds or wallet credentials may be at risk.
Wallet seeds, also known as recovery phrases, can provide the information needed to restore access to a cryptocurrency wallet. If a user enters a recovery phrase on a malicious website, an attacker may be able to use it to gain control of the associated funds. Users should therefore treat requests to submit seed phrases through links in social media posts with extreme caution.
However, the available information does not establish how the COLDCARD account was compromised, whether the phishing link collected any recovery phrases, or whether the incident resulted in additional losses. The company’s review of account access may help clarify how the post was published.
Offline 2FA and Restricted Access Under Scrutiny
The incident is notable because COLDCARD reportedly had offline 2FA and tightly restricted access in place since 2017. These measures are intended to strengthen account security, making the appearance of an unauthorized post a matter that warrants further investigation.
COLDCARD said it had contacted X and was reviewing all account access. The information shared by Coin Bureau did not provide further details about the suspected method of access, the identity of any potential attacker, or the outcome of the platform’s response.
The incident also illustrates the distinction between protecting a cryptocurrency wallet and protecting the social media accounts used to communicate with customers. Even when a wallet security product is designed to safeguard private keys, a compromised public communication channel can potentially be used to distribute fraudulent instructions or malicious links.
Incident Follows Reported Theft of 1,789 BTC
The phishing post emerged against the backdrop of a separate security issue involving COLDCARD firmware. According to Galaxy Research, a firmware flaw previously led to the theft of 1,789 BTC from user wallets, with the theft beginning on July 30.
The reported Bitcoin theft and the more recent phishing incident are distinct security matters in the information available. No evidence provided in the report establishes that the firmware vulnerability was connected to the unauthorized X post, and the two incidents should not be treated as having the same cause.
The figure of 1,789 BTC underscores the financial stakes associated with cryptocurrency security failures. However, the available report does not specify the dollar value of the stolen Bitcoin, the number of affected wallets, or whether the firmware-related losses have been recovered.
For now, COLDCARD has confirmed that it contacted X and is reviewing account access following the deleted phishing post. The investigation into the social media incident remains separate from the previously reported firmware flaw and the 1,789 BTC theft documented by Galaxy Research.
Writer: Victoria HaleTechnology & Blockchain WriterVictoria Hale writes about blockchain technology, digital infrastructure, and the intersection of emerging technologies with finance. Her articles explore how new protocols and systems are shaping the evolving digital economy.She prioritises clarity and accuracy when explaining technical developments to a general audience.
Check out other news and articles on Google News
Disclaimer:
The articles on Hokanews are here to keep you updated on the latest buzz in crypto, tech, and beyond—but they’re not financial advice. We’re sharing info, trends, and insights, not telling you to buy, sell, or invest. Always do your own homework before making any money moves.
Hokanews isn’t responsible for any losses, gains, or chaos that might happen if you act on what you read here. Investment decisions should come from your own research—and, ideally, guidance from a qualified financial advisor. Remember: crypto and tech move fast, info changes in a blink, and while we aim for accuracy, we can’t promise it’s 100% complete or up-to-date.