Markets › News › Security

COLDCARD Official X Account Hacked to Promote Phishing Scam

The hardware wallet provider's official X account was compromised to post a fake security alert directing users to a phishing site.

The hardware wallet provider's official X account was compromised to post a fake security alert directing users to a phishing site. This is an original Token Times brief synthesising 5 outlets (TronWeekly, Crypto Daily, Cointelegraph, and others), plus live market data, as of Mon, 12 Oct 2026 14:15:02 UTC.

Why it matters

The incident highlights the growing threat of social media account takeovers for crypto companies, potentially compromising user security and trust in official communications.

Key takeaways
  • COLDCARD's official X account was hacked to post a fake security alert.
  • The phishing post directed users to a fraudulent wallet-migration website.
  • The incident prompted COLDCARD to request an X investigation.
  • Crypto market remains largely unaffected, with Bitcoin up 0.23%.
What the reporting agrees on

Both TronWeekly and Crypto Daily report that COLDCARD's official X account was compromised to post a fraudulent security alert. The posts warned users of false firmware capacitors and redirected them to a phishing website disguised as a wallet-migration service. While both outlets confirm the phishing attempt, Crypto Daily provides the additional detail that COLDCARD has requested an X investigation into the incident. No outlet reports any conflicting information or figures.

On October 26, 2023, the official X account of COLDCARD, a popular hardware wallet provider, was compromised by hackers. The hackers posted a fake security alert warning users about alleged firmware vulnerabilities in COLDCARD devices.

The fraudulent post included a link to a phishing website disguised as a wallet-migration service. This tactic aimed to trick users into entering their private keys or other sensitive information, potentially leading to theft of their crypto assets.

TronWeekly and Crypto Daily both report the incident, with Crypto Daily adding that COLDCARD has requested an X investigation into the account takeover. The incident underscores the vulnerability of social media accounts, even for companies in the security-focused crypto industry.

This attack follows a pattern of increasing cyber threats against crypto companies, where hackers exploit official communication channels to target users. Such incidents can erode user trust and highlight the need for enhanced security measures.

In the broader market context, the crypto market cap stands at $2.89 trillion, with Bitcoin showing a modest 24-hour gain of 0.23%. The Fear & Greed Index remains in 'Greed' territory at 69, indicating a relatively stable market environment despite the security incident.

The market when this published · October 11, 2026
Total market cap$2.89T
Bitcoin 24h+0.23%
Ethereum 24h+1.49%
BTC dominance57.9%
Fear & Greed69 · Greed

COLDCARD Official X Account Hacked to Promote Phishing Scam — questions & answers

What was the purpose of the phishing attack?

The attack aimed to trick COLDCARD users into visiting a fake wallet-migration site to steal their private keys and crypto assets.

How did COLDCARD respond to the incident?

COLDCARD reported the X account compromise and requested an investigation into the security breach.

What is the current state of the crypto market?

The total crypto market cap is $2.89 trillion, with Bitcoin up 0.23% in the last 24 hours.

Which outlets reported this story?

This is an original Token Times brief that synthesises reporting from TronWeekly, Crypto Daily, Cointelegraph, Crypto.news, The Coin Republic, with the key figures cross-checked for agreement across them. It is not a copy of any one article — follow the source links above for the original reporting.

Token Times Newsdesk Data-stamped

Token Times's newsdesk writes original briefs by synthesising coverage from across the crypto press — 50+ outlets including CoinDesk, The Block, Decrypt and Cointelegraph — cross-checking the figures they report — and verifying them against on-chain data from DeFiLlama and mempool.space — plus live market context (CoinGecko, Binance). We summarise and link to every source; we never reproduce full articles. Read our editorial standards and how we use AI. Not financial advice.

Market data verified against CoinGecko & Binance · October 12, 2026 ⛓ Timestamped at Bitcoin block #971,089 sha256:3afc0c29468ca714
Corroborated across 5 outlets, reported over about 28.3 h — this is an original Token Times summary with live market data, not the original article.Crypto Daily · Oct 11 09:41 ↗Crypto.news · Oct 11 09:51 ↗Cointelegraph · Oct 11 10:40 ↗TronWeekly · Oct 11 16:00 ↗The Coin Republic · Oct 12 14:00 ↗

Original summary — not financial advice. This is an original Token Times brief that summarises a development reported elsewhere and adds live market data for context; it is not the original article and reproduces no part of it. Follow the source link above for full details. Crypto is volatile and high-risk — always do your own research.