Coldcard, a hardware wallet that supports only bitcoin, says a phishing link was posted on its official X account on Sunday. The company says it is looking into how the link got there.
According to Coldcard, the account has been protected by offline two-factor authentication since 2017, and only a small number of people can access it. The company has not said how the link was posted despite those controls.
Coldcard told users not to open or interact with the link. It said it will post more updates once they are verified. It has not yet said who was responsible, how long the link stayed up, or whether anyone lost funds.
For someone already holding a perpetual position on Bitget, Bybit, MEXC or OKX, this changes nothing directly. The report names no exchange and gives no figures on funding rates, trading fees or liquidity. It is a security incident on one company's social media account.
Source: cointelegraph — Coldcard says it’s investigating how phishing link appeared on its X account