▼ Bearish
Coldcard's official X account was compromised in a phishing attack, distributing a fraudulent security alert aimed at Mk4, Mk5, and Q wallet users.
The attackers exploited concerns from a previous security incident in July, urging users to migrate funds via a malicious link. Coldcard has removed the post and confirmed that its internal credentials and offline two-factor authentication remain secure, while an investigation into potential platform-level access is ongoing.
Reporting aggregated and summarized by CLOM — research & education, not financial advice.