Hacking News
Coldcard Bitcoin Wallet Maker Compromised Again
The official X account of Bitcoin hardware wallet manufacturer Coldcard was compromised on October 11, 2026. Attackers published a fake notice claiming a 'critical firmware vulnerability' affecting the Mk4, Mk5, and Q models, urging users to move their funds immediately through a phishing website. The post was deleted due to the brand’s recent crisis, which involved a linker error in the device code leading to wallets with weak entropy. Hackers exploited this context to make the scam more convincing. Coldcard representatives found no evidence of a breach in their own systems, stating that their logs contained no records of unauthorized logins or sessions. The company's own credentials and offline two-factor authentication (2FA) method, used since 2017, remained secure. The incident highlights the risk of users manually entering their 24-word seed phrases on a phishing page, despite Coldcard's efforts to prevent such actions.