Coinbase

avoid.net/coinbase→10/100·95% conf.

[AI-DRAFTED · AWAITING VERIFICATION][src:zachxbt][src:defillama]

10/100

[CRITICAL]95% conf.

Summary

Coinbase suffered a documented ecosystem incident with reported losses of $300K on Ethereum. This page tracks DeFiLlama's record of the event.

Have evidence about Coinbase?

No evidence submitted yet — be the first.

On-chain audit

Editorial decisions, corrections, and updates are anchored on Solana.

audit log →version history →

Coinbase — $300K (2025-08-13)

DeFiLlama recorded a security incident affecting Coinbase on August 13, 2025, with reported losses of $300K on Ethereum. Classification: Ecosystem. Technique: MEV composability attack.

Sources

[1]HIGHCoinbase — $300K (2025-08-13)research

Coinbase

The threat actor who stole $300M+ from Coinbase users by paying customer support just began trolling me onchain with this message after swapping $42.5M+ from BTC -> ETH via Thorchain today. Transaction hash [0x18c909a8438d94e88a434521ee9fc143c8777452fbecb09b034b8fd049d6477f](https://etherscan.io/tx/0x18c909a8438d94e88a434521ee9fc143c8777452fbecb09b034b8fd049d6477f)

Sources

[1]MEDCoinbasesocial media

Coinbase

Another $45M+ was stolen from Coinbase users via social engineering scams in just the last week. Theft addresses bc1qksulmw0scf9en4w22hzh3hvarnrfflyh52mydz bc1qjpepgf7nfkm3mlumdru8lgjmsca8cc982f08xd bc1qfmc6pkq3u63dzt6w28yxd28fhluqdzcyjfngy2 bc1q7x2fexw0fcufym04ug7kdk2r6pzfeg00g6xfjk bc1qv9p9gcng7u9k8qxcqee5fhxnm8y6zwd4lal3lv bc1qm6u4d4a0d6dnlwr22ywwlgzayvtgx6h45v4dln bc1qel8as46edjk4h750kem4z280l09294ewj458qk bc1qw3ggh8vdjtry04w790pz2w0synz3ewtpfc9rdj 0xaDEFbB6082F98BE8f0f7F0323af19eCD216f13B9 0x75B09e181a8bCfC4e05DB22B673d92bc55Fee150 h/t [tanuki42](https://x.com/tanuki42_) for the assistance Over the past few months I have [reported on nine figures stolen](https://t.me/investigations/242) from Coinbase users via similar social engineering scams. Interestingly no other major exchange has the same problem.

Sources

[1]MEDCoinbasesocial media

Coinbase

It is suspected a Coinbase user was scammed yesterday for $34.9M (400.099 BTC). Theft address [bc1qvlustvxhqzee9tgqers4tfungrg6c0fs4u76jf](https://blockchair.com/bitcoin/address/bc1qvlustvxhqzee9tgqers4tfungrg6c0fs4u76jf) After uncovering this theft I noticed multiple other suspected thefts from Coinbase users in the past two weeks bringing the total stolen this month to $46M+. Funds from each theft were bridged from Bitcoin to Ethereum via Thorchain / Chainfllip and swapped for DAI. 60.164 BTC - Mar 26 bc1qhc72zfqwqh3e6lns5ay084k29tmqlgw75jsxec 46.147 BTC - Mar 25 bc1qd6v3220v49j0xgmycksze59z90gru46dlxg8ff 20.028 BTC - Mar 16 bc1qd59e296yyr8x4gyr53xt4yjmmgukwemetalcuf Coinbase has not flagged any of the theft addresses from these victims in compliance tools. Last month [I posted an investigation on X](https://x.com/zachxbt/status/1886411891213230114) about how $65M was stolen from Coinbase users in December 2024 - January 2025 and talked about how Coinbase has quietly been facing a $300M / yr social engineering scam problem affecting its users.

Sources

[1]MEDCoinbasesocial media

Coinbase

Coinbase has a serious fraud problem just uncovered many more recent thefts from Coinbase users with [tanuki42](https://x.com/tanuki42_) so I think I will need to dedicate an entire post on X/Twitter to them. The $150M / yr stolen from Coinbase users is just from thefts i independently confirmed so it's more than likely multiples of this number…..

Sources

[1]MEDCoinbasesocial media

Coinbase

A Coinbase user was likely social engineered and scammed for 110 cbBTC ($11.5M) on Base last month by a threat actor. The stolen funds were immediately swapped, bridged, and laundered through multiple instant exchanges and funds consolidated with other Coinbase victims on Ethereum. Theft transaction hash [0x8639f4b4420d47d68f27dc27967ff62ec913106e5b9ce99011de99b8d91813cd](https://basescan.org/tx/0x8639f4b4420d47d68f27dc27967ff62ec913106e5b9ce99011de99b8d91813cd) [0xb5895314777776da645529df83cd0d0883ed456e2c81e27c97eb5cf45a59c36b](https://basescan.org/tx/0xb5895314777776da645529df83cd0d0883ed456e2c81e27c97eb5cf45a59c36b) [0xfa26f3917519444c7d3d9ca05fc70b289d44958cb55801b9221d7b492f41c76d](https://basescan.org/tx/0xfa26f3917519444c7d3d9ca05fc70b289d44958cb55801b9221d7b492f41c76d) Coinbase social engineering scams have resulted in $150M+ / yr stolen from users due to data breaches, email/call spoofing, bad detection, etc

Sources

[1]MEDCoinbasesocial media

Coinbase

Someone was drained for $18M (~5800 ETH) from their Coinbase account 9 hours ago. Funds were immediately transferred to instant exchanges and bridged to Bitcoin via THORChain, Defiway, and Wan Bridge. Theft address 0xf2fB2844C46C19A623957Ed6DBaB148301B18161

Sources

[1]MEDCoinbasesocial media

Timeline

2024-05-03

Coinbase

t.me

2025-01-31

Coinbase

t.me

2025-01-31

Coinbase

t.me

2025-03-28

Coinbase

t.me

2025-05-07

Coinbase

t.me

2025-05-21

Coinbase

t.me

2025-08-13

Coinbase — $300K (2025-08-13)

defillama.com

Research Gaps

2 open · agent-resolvable

Heuristic next-actions surfaced for researchers and worker agents. Resolving these strengthens the page's evidence base and trust score.

[high]
no regulatory
No regulatory or sanctions cross-check. Run OFAC SDN, SEC EDGAR, and CFTC enforcement-action lookups for this entity.
[med]
unarchived sources
Cited sources are not Wayback-archived. Run the archiver to pin their content before they rot.

model: defillama-connector, zachxbt-connector

generated: 5/4/2026, 2:54:21 AM

avoid.net — verified advice for a post-truth world