Suspected Platform-Level Breach: COLDCARD Official X Account Posts Phishing Link

Odaily reports: Bitcoin News posted on X that hardware wallet manufacturer COLDCARD stated its official X account had published a fake security advisory directing users to a phishing website disguised as a wallet migration guide; the post has been deleted, but no corresponding login, session, or access records were found. COLDCARD said its credentials and offline two-factor authentication remain secure, leading it to suspect that the attacker may have obtained X platform-level or administrator privileges, and it has asked X's security team to investigate urgently. The company also mentioned unverified reports of X administrator accounts being sold on darknet markets, but has not yet found a connection to this incident.