Exchange Ranking
Top Exchanges
24h Volume Ranking
Popularity Ranking
Exchange BTC Balance
Proof of Reserves
Decentralized Exchanges
Funding Rate
Funding Heatmap
Liquidation Data
Max Pain
Long/Short Ratio
Whale L/S Ratio
Binance/Okex/Huobi L/S
Bitfinex Margin L/S
ETF Tracker
Solana ETF
XRP ETF
Hong Kong ETF
Bitcoin Treasuries
Crypto Reversal
Ethereum Reserves
HyperLiquid Wallet Analysis
Hyperliquid Whale Watch
Large Transactions
On-chain Movement
Bitcoin ROI
Stablecoin Market Cap
Options Analysis
News
Articles
Economic Calendar
Features
Wallet
Contract Calculator
Security
Collections
Watchlist
Following
BTC Coldcard 警告比特币用户：其 X 账号出现钓鱼链接
硬件钱包制造商表示，正在调查恶意帖子是如何出现在其官方账号上的。Coldcard 是一家生产用于离线存储比特币的硬件钱包的公司，在其官方 X（原 Twitter）账号上出现钓鱼链接后，发布了公开警告。该公司已确认此事发生，并提醒关注者不要与该链接或任何相关提示进行互动。
关于该链接如何进入账号的细节仍在审查中。Coldcard 表示正在积极调查此事，但尚未披露账号是通过黑客攻击、第三方工具还是其他方法被攻陷的。该公司也未具体说明该钓鱼链接声称提供什么服务，以及试图从受害者那里获取哪些信息。
像 Coldcard 这样的硬件钱包被宣传为一种将私钥与联网设备隔离的安全方式。因此，对于许多寻求安全指导或软件更新的用户来说，该公司的社交媒体平台是一个值得信赖的渠道。来自该账号的钓鱼帖子在关注者中的影响力可能大于未验证来源的帖子，因为它看起来直接来自一个与自我托管和安全相关的品牌。
Phishing attacks that hijack verified or well-known social media accounts are a recurring problem across the cryptocurrency industry. Attackers often target accounts with large numbers of security-conscious fans, because these audiences are more likely to trust links shared in the name of familiarity. In recent years, wallet makers, exchanges and project teams have experienced similar incidents.
Holders who use hardware wallets are often advised never to enter mnemonic words or private keys on websites, no matter how legitimate the request may seem. Legitimate hardware wallet companies typically do not require users to enter recovery phrases through browser-based tools or unsolicited links. Security researchers consistently point out that any legitimate support interaction does not require sharing mnemonic words.
The company publicly acknowledged the problem and recommended a cautious response, following standard practices for companies handling account-level security incidents. Instant warnings are designed to limit the number of users who click on a link before it is removed or accounts protected. Coldcard has not detailed other protective measures planned after the incident.
Market Impact
Since this matter involves account security rather than protocols or market fundamentals, it is unlikely to have a direct impact on broader cryptocurrency prices. However, it does highlight the ongoing risks to the security of social media accounts in the cryptocurrency industry, especially for companies whose products are built around protecting user funds.
Specifically, for Coldcard, the incident could prompt a review of its internal account management and communication practices. Hardware wallet manufacturers are highly dependent on user trust, and incidents involving phishing content from official channels may raise questions about operational security, even if the core product itself is not affected.
Coldcard's investigation of phishing posts is still ongoing, and the company urges users to be vigilant about any suspicious links shared under its name until more details emerge.
FAQs
What happened to Coldcard's X account?
A phishing link was posted from Coldcard's official X account, prompting the company to warn users and start investigating why it appeared.
Has Coldcard's hardware wallet itself been compromised?
There is no information indicating that hardware wallet products have been affected. The matter involved the company's social media accounts, not its devices.
What should users do if they see a phishing link?
Users are advised not to click on links, avoid entering any personal information or mnemonics, and wait for the official update of Coldcard.
Did Coldcard explain how phishing posts were posted?
Not yet. The company said it was investigating the cause, but had not disclosed further details as of the release of this report.
