Article

COLDCARD Official X account compromised and posted a tweet containing a phishing link; the tweet has since been deleted

PANews October 11 reported that hardware wallet manufacturer COLDCARD stated that its official X account had posted a message containing a phishing link, which has since been deleted. The account has used offline 2017 since 2FA and strictly restricted access. The team has contacted X and is reviewing all account permissions, with a verification update to follow.COLDCARD stated that no login, session, or access records were found, and that the credentials and offline 2FA are secure. It suspects that platform-level or administrator unauthorized access may be involved, and called for an immediate investigation and preservation of the relevant logs.

Source: https://www.panewslab.com/zh/articles/01a129e1-0403-7784-8e21-c49db8d3702a