Coldcard’s official X account was compromised and posted a phishing link; the original post has now been removed.

Coldcard announced it is investigating a phishing link incident involving its official X account. The related post has been deleted, and the company is reminding users not to access or interact with the link. The account has used offline two-factor authentication (2FA) since 2017 and strictly restricts access permissions. Coldcard has contacted the X platform and is reviewing all account access records; verified updates will be released via its official account later.

@tonmelonfest