COLDCARD Warns of Phishing Post on Its Official X Account
COLDCARD said a phishing post appeared on its official X account and was later deleted. The post pointed users to a fake wallet migration page, and the company said it found no matching login record while stating that its credentials and offline two-factor authentication remain secure. A separate researcher found the fake site was built to collect wallet recovery phrases.
What this rests on
What it means
Each sentence links inside to the piece that supports it.
Users who saw COLDCARD’s official X account during the incident were the immediate audience for the post and its removal, because the message directed them to a fake wallet migration guide. Anyone handling COLDCARD wallets would notice that the company also said its credentials and offline two-factor authentication remain secure.
Market reaction
How the story was built
Every piece in order, with the time its news medium declares — if it is not believable we use ours and say so — and what it added to what was already known at that point. Arriving first is not the same as adding something.
Other recent incidents
| When | What happened | Figure |
|---|---|---|
| 2 days ago | KolanHook (1.279453 ETH) incident | no figure in dollars |
| 3 days ago | UNCX Network V2 · Incorrect Share Accounting incident | $86k |
| 3 days ago | Pirate Chain · Transaction validation vulnerability incident | $10.7M |
| 4 days ago | Gamdom · Hot wallet server compromise incident | $4.2M |
| 7 days ago | Papertrade · Price manipulation incident | $1.3M |
4197 incidents stored
What could happen next
What the prediction markets currently price as likely. This is context, not a forecast of ours: there is money on it, and that is all we show.