Exchange Ranking
Top Exchanges
24h Volume Ranking
Popularity Ranking
Exchange BTC Balance
Proof of Reserves
Decentralized Exchanges
Funding Rate
Funding Heatmap
Liquidation Data
Max Pain
Long/Short Ratio
Whale L/S Ratio
Binance/Okex/Huobi L/S
Bitfinex Margin L/S
ETF Tracker
Solana ETF
XRP ETF
Hong Kong ETF
Bitcoin Treasuries
Crypto Reversal
Ethereum Reserves
HyperLiquid Wallet Analysis
Hyperliquid Whale Watch
Large Transactions
On-chain Movement
Bitcoin ROI
Stablecoin Market Cap
Options Analysis
News
Articles
Economic Calendar
Features
Wallet
Contract Calculator
Security
Collections
Watchlist
Following
BTC Hardware wallet maker Coinkite investigates breach of official social media accounts
Hardware wallet company Coinkite (maker of Coldcard's hardware wallet) said it is investigating a cyber intrusion after malicious links appeared on its official social media accounts. According to U.Today and CryptoBriefing, the phishing link appeared on the company's official X platform account. Currently, the company is working to determine how accounts were accessed and whether any user data was affected.
Coldcard is known for its offline, physically isolated security and is specifically used to store Bitcoin private keys. Its hardware is designed to isolate signature operations from connected devices. However, this latest security incident occurred online, not through the physical device itself.
This is reportedly another intrusion into the company, although the nature of the early incident is different from the current incident. It is reported that previous problems mainly involved hardware or supply chain concerns, while this incident focuses on the takeover of online accounts. This distinction is crucial because it shifts the threat surface from device manufacturing to digital account security and falls into a completely different risk category.
Distributing phishing links through infected social media accounts is a common attack method in the cryptocurrency industry. Attackers often use the accounts of trusted brands to lure followers to visit fraudulent websites. These websites can mimic legitimate wallet interfaces, or prompt users to enter mnemonic words or connect wallets to malicious smart contracts.
对于硬件钱包用户而言，核心安全承诺在于保持私钥离线。账号层面的钓鱼事件并不一定直接破坏这种离线安全模型。然而，它可能会诱骗用户采取设备之外的行动，从而暴露于损失风险中，例如访问虚假的更新页面或在仿冒网站上输入敏感信息。
截至目前，Coinkite 尚未详细说明泄露的范围，也未确认是否有客户资金受到影响。公司的调查仍在进行中，随着事态的发展，预计将公布更多细节。
市场影响
涉及知名硬件钱包品牌的安全事件往往会引起更广泛的自我托管市场的关注。Coldcard 定位为注重安全的选项，供那些优先考虑离线密钥存储而非便利性的比特币持有者使用。
即使在线账号入侵没有直接影响硬件本身，仍可能影响用户信任，并促使加密货币行业就社交媒体账号安全实践展开更广泛的讨论。在此次事件之后，其他钱包制造商和交易所可能面临加强自身账号保护的更大压力。
Coinkite 对钓鱼链接的调查仍在进行中，公司尚未详细披露泄露的全部范围。建议 Coldcard 设备用户通过官方渠道验证任何声称来自公司的链接或通讯内容。
常见问题解答
Coldcard 的官方账号发生了什么？
A phishing link posted on the official X account of Coldcard maker Coinkite triggered an internal investigation into how access was obtained.
Will this incident affect the security of Coldcard's hardware wallet?
The report pointed out that this was an online account intrusion, not a hardware-level vulnerability. Coldcard devices are designed to keep private keys offline and isolated from networked systems.
Has Coinkite confirmed whether customer funds have been affected?
Existing reports have not confirmed whether any customer funds have been lost. Coinkite's investigation is still ongoing and more details are expected to be announced later.
Is this the first time Coldcard has involved security issues?
The report said this was a repeat incident at the company, but it was reported that the previous issue involved different circumstances from this online account breach.
