🚨 NEW: COLDCARD says a phishing link was posted from its official X account despite offline 2FA and tightly restricted access. The company says it found no matching login or access records and is investigating a possible security breach. This comes after a separate COLDCARD firmware flaw that previously led to over 1,700 BTC being stolen.