Coldcard Warns Users After Official X Account Posts Phishing Scam

Bitcoin hardware wallet maker Coldcard launched an investigation after its verified X account was compromised on October 11 to broadcast a fraudulent security alert. The unauthorized post falsely claimed firmware flaws in Mk4, Mk5, and Q models, directing users to an impersonation site for fake wallet migrations. Coldcard and parent firm Coinkite removed the message, reporting no internal breaches or matching login sessions despite active offline two-factor authentication. No direct financial losses have been verified. The scam exploited fears from a July vulnerability that drained 1,600 to 1,800 BTC.