COLDCARD's official X account posted a phishing link, suspected of being compromised at the platform level

Hardware wallet manufacturer COLLDCARD revealed that its official X account had issued false security announcements to induce users to jump to phishing websites that forged wallet migration instructions. Although the post has been deleted, no related login, session or access traces have been detected. COLDCARD emphasized that the account's credentials and offline two-factor authentication mechanism are still in a secure state, which speculated that the attacker may have obtained X platform level or administrator level privileges, and the company has submitted an emergency investigation request to the X security team. In addition, COLDCARD also pointed out that there are rumors about the circulation of X administrator accounts in the dark network market, but relevant reports have not confirmed a direct connection with this incident.