🚨JUST IN: COLDCARD says a phishing link was posted from its official X account despite offline 2FA with tightly restricted access since 2017. The deleted post posed as an “URGENT COLDCARD SECURITY UPDATE” urging users with affected seeds to “begin a careful migration now.” COLDCARD says it has contacted X and is reviewing all account access. Previously, a COLDCARD firmware flaw led to the theft of 1,789 BTC from user wallets starting July 30, per Galaxy Research.