Coldcard Suspects X Platform Access Following Lack of Login Logs

Cybersecurity9 days ago

Coinkite discovered that a malicious link was shared from its official social media page on Oct. 11 despite a total absence of sign-in records for the account. The hardware wallet maker found no unauthorized logins or session activity, leading it to suspect the fraudulent post was created through platform-level access provided by X.

The post, which Coldcard has since deleted, was disguised as an urgent security update telling users to migrate their wallet seeds. Researcher PortlandHODL found that the linked migration site transmitted entered recovery data to an external server. The affected account had used offline 2FA and tightly restricted access since 2017, and the company has warned followers not to interact with the scam.

Mapped to your portfolio

Possible scenarios

35%X Platform Flaw Confirmed-0.2%
30%Coldcard-Side Compromise-0.0%
20%OAuth Permission Abuse-0.1%

Each figure is the modeled move of the S&P 500 if the outcome occurs. For information only. Not investment advice.

Looking for more context or analysis?

Tilt chat provides reliable, tailored insights, alerts, and automations.

Coldcard Suspects X Platform Access Following Lack of Login Logs

In this story

Coinkite X PortlandHODL

Portfolio

SPY
State Street SPDR S&P 500 ETF Trust
100%

Portfolio

SPY
State Street SPDR S&P 500 ETF Trust
100%

Mapped to your portfolio

Possible scenarios

35%X Platform Flaw Confirmed-0.2%
30%Coldcard-Side Compromise-0.0%
20%OAuth Permission Abuse-0.1%

Each figure is the modeled move of the S&P 500 if the outcome occurs. For information only. Not investment advice.