Bitcoin-only hardware wallet maker Coldcard is investigating how a phishing link was posted on its official X account, warning users not to open or interact with it while the company reviews account access.
Coldcard warns users after deleted post
The company said the post has been removed and that it is working to determine how it was published. Coldcard said its X account has used offline two-factor authentication and tightly restricted access since 2017, making the appearance of the link a security concern for the company and its users.
Coldcard advised users not to visit or interact with the link. It said its only official website is https://coldcard.com, giving customers a direct reference point for verifying legitimate web addresses.
The company has contacted X and is reviewing all access to the account. Coldcard said it would publish additional information only when updates had been verified. The incident does not, in the available information, establish that customer funds or devices were compromised through the X post.
According to Cointelegraph, the warning comes after Coldcard was linked to one of the largest cryptocurrency theft incidents reported in 2026.
Earlier Coldcard exploit added to a heavy month for crypto theft
July was reported as the second-worst month of 2026 for cryptocurrency theft. DefiLlama data put total crypto stolen during the month at $247.4 million, behind April’s $644 million figure.
The Coldcard exploit was identified by Galaxy Digital as July’s largest exploit. At least $100 million in Bitcoin was stolen from 7,300 wallets across three confirmed attack waves, according to the firm. Coldcard also identified a suspected fourth wave, which could lift total losses to about $130 million.
DefiLlama’s hack tracker estimated losses associated with the exploit at $115 million. Those figures concern the earlier exploit and are separate from the phishing link reported on Coldcard’s X account.
A phishing link is designed to direct users to a fraudulent website or interaction, often with the aim of obtaining sensitive information. For hardware-wallet users, checking the domain before entering details or following instructions is particularly important; Coldcard specifically pointed users to coldcard.com as its sole official website.
Market picture
Moneyiar market data at 11:34 a.m. on October 11, 2026, showed Chainlink (LINK) at $12.8557031788, down 0.32% over 24 hours and 9% over seven days. Compound (COMP) was $24.9020651249, down 0.14% in 24 hours and 0.25% over seven days.
Rootstock Infrastructure Framework (RIF) traded at $0.083945027, up 0.89% over 24 hours and 0.94% over seven days, according to Moneyiar data at 11:33 a.m. RedStone (RED) stood at $0.1478825858, down 1.25% over 24 hours and 15.4% over seven days, based on Moneyiar data at 11:34 a.m.
