COLDCARD got breached—again.

Phishing link posted from their official X account even with offline 2FA + restricted access. Zero login records found. They're investigating.

This is the SAME team that had a firmware flaw that led to 1,700+ $BTC getting drained.

If your hardware wallet provider can't secure their own socials, how much trust you putting in their product?

Stay paranoid. Verify everything.