COLDCARD's official X account posted a phishing link to a fake wallet migration site before being deleted. Despite secure credentials and offline 2FA, the company suspects platform-level X compromise rather than direct account takeover, and has requested X's security investigation.