On October 11, 2026 at around 02:00 UTC, a fraudulent post claiming a critical firmware vulnerability appeared on Bitcoin hardware wallet manufacturer Coldcard's official X account