Coldcard Investigates Unauthorized Phishing Link Posted on Its X Account
Bitcoin-only hardware wallet Coldcard announced that an unauthorized phishing link appeared on its official X account on Sunday, a post that has since been deleted. Although the company has used offline two-factor authentication with tightly restricted access since 2017, it is now investigating how the link was published. Coldcard warned users not to interact with the link and confirmed that its only official website is coldcard.com.
Phishing Incident and Company's Response
On Sunday, an unauthorized phishing link was posted on Coldcard’s official X account and later deleted. The company stressed that it has employed offline two-factor authentication and tightly controlled access since 2017. Coldcard is currently working with X’s administration and reviewing all account access to determine how the incident occurred and to prevent future breaches.
Users were strongly advised not to click on or interact with the suspicious link. Coldcard confirmed that its sole official website is https://coldcard.com, emphasizing the importance of caution when receiving information purportedly from the brand. The company promised to share any further verified updates regarding the situation.
Connection to Major July 2026 Crypto Theft
Earlier in July 2026, as reported by DefiLlama, the month became the second-worst for crypto theft after April’s $644 million loss. Hackers stole $247.4 million worth of cryptocurrency in July, with the largest exploit involving Coldcard. According to Galaxy Digital, this exploit led to the theft of at least $100 million in Bitcoin from 7,300 wallets through three confirmed attack waves.
Coldcard also identified a suspected fourth wave that could raise total losses to around $130 million. DefiLlama’s hack tracker estimated the total losses tied to this July exploit at approximately $115 million. This incident highlights security vulnerabilities even in crypto hardware and the ongoing need to improve defenses.
Why it matters
This news is significant because Coldcard is a well-known hardware wallet for Bitcoin, and the appearance of a phishing link on its official account suggests serious potential weaknesses in its security system. Coupled with the major July exploit involving Coldcard that caused massive user losses, the incident underscores the need for stronger account protections and increased user awareness about phishing risks in the crypto space.
Prepared from the source material with AI-assisted editing and checked against the supplied facts.
Open original source ↗