Bitcoin News: Coldcard Suspects Platform-Level Breach After X Account Used in Phishing Attack

Hardware wallet manufacturer @COLDCARDwallet suspects a platform-level breach after attackers used its official X account to publish a fake security advisory directing users to a phishing website disguised as a wallet migration guide. The post has been deleted. The company says it found no corresponding login, session or access records, and that its credentials and offline two-factor authentication remain secure. That gap raises the prospect that attackers gained unauthorized platform-level or administrative access to X. COLDCARD also cited unverified reports of X administrative account access being sold on darknet markets, though it said no connection to this incident has been established. The company has asked X's security team for an urgent investigation, calling the episode a targeted, highly specific attack. "We are investigating how a post containing a phishing link was published from this account. It has since been deleted. Do not visit or interact with that link," the company said, adding that the account relies on offline 2FA with tightly restricted access.