Coldcard Investigates Phishing Link Incident on Official Account
- A phishing link was posted on Coldcard’s official X account, which has used offline two-factor authentication since 2017.
- Coldcard is investigating how the post was published and has advised users not to interact with the link.
- The company reported that July was the second-worst month for cryptocurrency thefts in 2026, with $247.4 million stolen.
- The Coldcard exploit accounted for at least $100 million in Bitcoin (BTC) losses from over 7,300 wallets during three confirmed attack waves.
- DefiLlama’s hack tracker estimated total losses related to the Coldcard exploit at approximately $115 million.
Coldcard is reviewing account access and has contacted X regarding the incident while emphasizing that their only official website is coldcard.com. This incident follows significant thefts in July, highlighting ongoing security challenges in the cryptocurrency space.
With over $100 million lost due to recent exploits, this phishing incident underscores the importance of vigilance among users of hardware wallets like Cold Storage. (Source)
