What the hell, Coldcard’s official account posted a phishing link: in the early hours of October 11, it claimed there was an urgent firmware migration and linked to migrate.coldcardwallet.io, then deleted the post. Their own checks found no login records, and offline 2FA was still intact, so they asked X to investigate whether the platform itself had been breached. It’s been quite a week for the hardware wallet scene. Do you think the account was hacked, or did the platform mess up? Come argue it out in the comments.