At Least 6,000 Coinbase Accounts Exposed In Hack

Taylor Scott

Last Updated: October 2, 2021 7:42 am

3 mins read

Reason to trust

Strict editorial policy that focuses on accuracy, relevance, and impartiality

Created by industry experts and meticulously reviewed

The highest standards in reporting and publishing

How Our News is Made

Strict editorial policy that focuses on accuracy, relevance, and impartiality

Ad discliamer

Morbi pretium leo et nisl aliquam mollis. Quisque arcu lorem, ultricies quis pellentesque nec, ullamcorper eu odio.

Coinbase has released a breach notification letter this week saying that a minimum of 6,000 user accounts were victim to hackers. The exchange has stated that the breach took place between March and May of this year.

What We Know

The letter notes that unauthorized third parties exploited Coinbase’s SMS account recovery process and transferred user funds to accounts outside of Coinbase. However, the company added that in order to do so, those third parties needed to have email addresses, passwords and phone numbers – as well as email access.

Coinbase believes that users fell victim to a phishing attack, or some sort of equivalent, in order to have this information exposed, and that there was no evidence to support that the information was taken directly from Coinbase. The exchange states that account recovery protocols around SMS were updated after Coinbase discovered the issue.

The letter closes that some accounts have already been reimbursed and that all accounts would be fully compensated equal to any losses incurred. The letter was also posted on the California Attorney General website.

Since going public earlier in the year, COIN has faced substantial headwinds, with less-than-stellar stock market performance. | Source: NASDAQ: COIN on TradingView.com

Safety First

While the amount of hacked crypto has not been disclosed, Coinbase’s immediacy in restoring user funds is reassuring, but comes at a time where a number of stories have been hitting the headlines around hacks and vulnerabilities.

In recent days, Compound Finance issued a governance rule that had a small piece of faulty code that resulted in inappropriate token distribution, putting over $80M worth of COMP tokens at risk. Just a few days prior, DeFi protocol pNetwork lost over $12M to hackers.

It’s also not the first sticky situation for Coinbase recently, either. Last week, pressure from the Securities and Exchange Commission (SEC) was enough to totally sideline the company’s anticipated interest-generating product, Lend. That came just a few weeks after a blog post and corresponding long-winded tweet thread from Coinbase CEO Brian Armstrong, expressing frustration in communications with the SEC, and describing the agency as “sketchy.”

Additionally, the major crypto exchange has faced challenges with the impacts of potential infrastructure legislation and USDC drama in recent months.

Crypto’s safety and security has substantially improved over time, but that doesn’t mean that no one is vulnerable. Our team at NewsBTC reminds you to always use two-factor authentification, ideally via an authenticator, never share your seed phrase, use platforms that you trust, and be on the lookout for suspicious emails that may be trying to phish.

Disclaimer: The information found on NewsBTC is for educational purposes only. It does not represent the opinions of NewsBTC on whether to buy, sell or hold any investments and naturally investing carries risks. You are advised to conduct your own research before making any investment decisions. Use information provided on this website entirely at your own risk.