Coldcard probes phishing link posted from its X account

For a hardware wallet maker, the social account is effectively part of the trust surface, so a malicious link posted from it matters more than a generic brand hack. The audience most exposed is Coldcard's own user base, conditioned to treat its channels as authoritative. The open question is whether this was an account compromise, a third-party tool, or something else, and how quickly the company can verify and communicate that — the credibility cost scales with the silence, not the incident.