Coldcard official X account compromised in phishing attack

The official X account for Coldcard was compromised in a phishing attack targeting Bitcoin investors. The attackers posted a fraudulent message claiming a critical security vulnerability regarding seed generation in recent firmware versions to trick users into visiting a malicious website.

Coldcard confirmed the breach but stated that its credentials and offline two-factor authentication remain secure. The company has requested an investigation from X, suggesting the breach may have occurred through unauthorized administrative or platform-level access on the social media site.