The hardware wallet provider Coldcard is currently investigating a security incident involving its official X account. On Sunday, a phishing link was posted from the company's profile. Coldcard stated that it has utilized offline two-factor authentication and restricted account access since 2017, and is now reviewing all access methods while coordinating with X.
The company has officially advised its user base to avoid interacting with the malicious link. It emphasized that the only legitimate website for the brand is coldcard.com. Coldcard has committed to providing further verified updates as the investigation into how the post was published proceeds.
This incident follows a significant security exploit involving Coldcard earlier in 2026. According to data from Galaxy Digital, that exploit resulted in the theft of at least $100 million in Bitcoin from 7,300 wallets across three attack waves. A suspected fourth wave could increase total losses to approximately $130 million.
Data from DefiLlama indicates that the July exploit was the largest of that month, contributing to a total of $247.4 million in cryptocurrency thefts during that period. This figure represents the second-highest monthly loss for the year 2026, following the $644 million stolen in April.
