Coldcard probes fake firmware alert posted from its X account
Coldcard is investigating a phishing post that appeared on its official X account around 02:00 UTC on October 11, 2026, warning of a seed-generation flaw and linking to a fake domain. The Bitcoin hardware wallet maker said an internal review found no unauthorized logins and credited offline two-factor authentication used since 2017. No verified user losses have been reported, and the company has asked X to investigate how the post was published.
Coldcard, a Bitcoin hardware wallet by Coinkite, is investigating a phishing post on its X account. Around 02:00 UTC on Oct. 11, 2026, the post posed as an urgent seed-generation warning and linked to migrate.coldcardwallet.io. Coldcard told users not to interact with it. An internal review found no unauthorized logins, which the company credits to offline two-factor authentication used since 2017. It asked X to investigate.
The fake alert did not reveal a new flaw; it referenced a vulnerability disclosed earlier in 2026. A July–August exploit drained over 1,700 BTC from affected devices, valued at about $100M–$130M. No verified losses tied to the X post have been reported. Coldcard says it will share updates only once verified.
This incident may deepen caution among Bitcoin holders who rely on hardware wallets, especially Coldcard users, by reinforcing that even official social accounts can be impersonated or compromised. It could also affect broader trust in social platforms as channels for security alerts, prompting users to verify firmware news through multiple independent sources before acting. The main near-term impact may be slower, more skeptical responses to urgent crypto warnings, rather than direct financial harm, since no verified losses have been reported.