Exchange Ranking
Top Exchanges
24h Volume Ranking
Popularity Ranking
Exchange BTC Balance
Proof of Reserves
Decentralized Exchanges
Funding Rate
Funding Heatmap
Liquidation Data
Max Pain
Long/Short Ratio
Whale L/S Ratio
Binance/Okex/Huobi L/S
Bitfinex Margin L/S
ETF Tracker
Solana ETF
XRP ETF
Hong Kong ETF
Bitcoin Treasuries
Crypto Reversal
Ethereum Reserves
HyperLiquid Wallet Analysis
Hyperliquid Whale Watch
Large Transactions
On-chain Movement
Bitcoin ROI
Stablecoin Market Cap
Options Analysis
News
Articles
Economic Calendar
Features
Wallet
Contract Calculator
Security
Collections
Watchlist
Following
BTC COLDCARD 官方 X 账号遭钓鱼攻击，呼吁平台调查
10 月 11 日，硬件钱包制造商 COLDCARD 宣布，其官方 X（原 Twitter）账号发布了一条钓鱼信息，将用户引导至一个伪造的钱包迁移网站。该公司表示，经核查未发现任何对应的登录、会话或访问记录，确认其账户凭证及离线双重认证（2FA）依然安全，并请求 X 平台调查是否存在平台层面的访问漏洞。
官方声明：确认为未经授权的钓鱼消息
在协调世界时（UTC）06:07 发布的公开声明中，COLDCARD 指出 @COLDCARDwallet 账号发布的内容属于未经授权的操作，并确认该账号为其在 X 平台上的官方存在。COLDCARD 强调，内部审查未找到与该消息发布相匹配的账户访问记录。目前尚不清楚该消息是如何被发布的，其向 X 提出的请求主要针对平台层面可能存在的访问权限问题，而非针对此次事件的确切原因解释。
虚假“紧急安全更新”诱导用户转移资金
According to Inforex, at about 02:00 UTC on October 11, a message disguised as an "emergency security update" appeared, instructing users to transfer funds through the domain name migrate.coldcardwallet.io, which is the target site for phishing. Although the fraudulent post was subsequently deleted, COLDCARD warned that users could still confuse the false migration instructions in it with real official security updates. The report did not provide information on user losses, page views or further dissemination. The main concern at present is that the fraudulent order may be mistakenly interpreted as a formal request from the wallet manufacturer.
Require X to investigate potential platform-level access risks
Because an internal review found no matching login, session or access records, COLDCARD has asked X to investigate the matter. The company statement stated that its account credentials and offline two-factor authentication are both in a secure state, but the mechanism behind account posting remains unclear. As of now, COLDCARD has not announced the timetable or specific conclusions of the X platform survey results. The phishing domain name and the deleted posts are still the core symbols of the October 11 disclosure.
