Incident
Coldcard investigates phishing link on its X account
2 min read · November 2026
Cointelegraph reports Coldcard is investigating how a phishing link appeared on its X account, with no further details confirmed yet.
Cointelegraph reports that hardware wallet maker Coldcard says it is investigating how a phishing link appeared on its X account. Beyond that headline, no other details, figures or timelines have been confirmed, so this post sticks to what has actually been reported.
For compliance analysts and investigators, an official account posting a phishing link is a reminder that the channel itself can be the attack surface. A verified handle lends false authority to a malicious link, and anyone who clicked it in the window before removal may have interacted with something designed to look legitimate.
Why this matters for your work
- Social accounts belonging to known crypto brands are a recurring target because followers trust the source without re-checking the link.
- Until Coldcard publishes more detail, the scope, the duration the link was live, and any addresses involved remain unknown.
- Any claim about what the link did, who was behind it, or how many people interacted with it should be sourced to Coldcard's own statement or further reporting, not assumed.
What you can actually do now
- Treat the report as unconfirmed beyond the headline until Coldcard or Cointelegraph publish follow-up detail.
- If a client or counterparty reports clicking a link from Coldcard's X account around this period, document the exact URL and timestamp rather than relying on memory.
- Watch for an official Coldcard statement naming any affected addresses, which would be the point at which on-chain tracing becomes relevant.
Until Coldcard confirms more, the only verified fact is that it is investigating, not what the link did or who was affected.
If specific wallet addresses are later published in connection with this incident, WalletDNA lets analysts check those addresses against known risk indicators as part of their own review, not as a verification of this case.
Sources
Check a wallet yourself
Risk analysis and entity attribution across 18 chains, free to start.
Analyze a wallet