Coldcard X Phishing Post Renews Wallet Security Concerns
Coldcard says a phishing link appeared in a post on its official X account on Sunday. It deleted the post, contacted X and is investigating how the account was accessed. Coldcard says the account has used offline two-factor authentication since 2017 and has tightly restricted access. It advises users not to click the link and identifies coldcard.com as its only official website.
The incident follows a separate Coldcard-related Bitcoin theft reported in July. Estimates differ: an earlier account put losses at about $100 million to $115 million, while a later report cited roughly $130 million when a suspected attack was included. Galaxy Digital reportedly identified at least 7,300 compromised wallets; the reports also describe confirmed thefts exceeding $1 million. The summaries do not establish that the X phishing post is connected to the earlier theft. A separate Ledger supply-chain incident highlights wider hardware-wallet and social-engineering risks.
Neutral
The reports describe a serious security concern but do not establish a direct connection between the phishing post and the earlier Bitcoin theft, or report a new loss of Bitcoin from the X incident. In the short term, the warning could prompt some traders to reduce exposure or move BTC to other custody, potentially adding brief caution or volatility. However, the event is centred on account security and does not itself change Bitcoin’s supply, network operation or fundamentals, so a sustained price effect is not clear. Longer term, repeated wallet-security incidents may affect confidence in self-custody and increase demand for stronger verification practices, but the available information alone does not support a directional BTC price outlook.