Coldcard's official X account was attacked and posted a phishing link; the original post has now been deleted.

BlockBeats news, October 11: Coldcard has issued a statement saying it is investigating an incident where a phishing link was posted on its official X account. The relevant post has now been deleted, and users are reminded not to visit or interact with the link.

The account has used offline two-factor authentication (2FA) since 2017 and strictly limits access permissions. Currently, Coldcard has contacted the X platform and is reviewing all account access records. Verified updates will be released through the official account in due course.