Security· ★★★★· bearish·

Coldcard's X account hacked in phishing attack targeting Bitcoin users

  • —The hack occurred around 02:00 local time; Coldcard issued an official warning at 05:46 UTC
  • —The fake post claimed a "critical seed generation vulnerability" and pointed to migrate.coldcardwallet.io
  • —Coinkite found no login or session records and suggested platform-level access to the X account
  • —The phishing exploits fallout from Coldcard's entropy bug, with losses estimated at 1,600–2,055 BTC ($100–130M)
Why it matters: The attack targets users already hit by Coldcard's seed-generation flaw and could trigger fresh thefts if they follow the fake migration link.
Source: Livecoins