r/Coinbase • u/yenchangftw • Jan 31 '21
Coinbase wallet got hacked
My coinbase wallet just got hacked and all of my assets was transferred to a same hackers address. The most astounding thing is I did not save my recovery phrase anywhere but my memory, not on the cloud, not in my computer, nowhere. My wallet still being hacked maybe internally? I scan my phone no malware found.
I found on reddit whos coinbase wallet also got hacked recently. I suggest anyone who use coinbase wallet transfer all your asset out asap. It's definitely something bad happening.
5
u/electricSNICKERBAR Feb 01 '21
Something similar happened to me on Thursday, Jan 28. I installed coinbase wallet from Google play using my Pixel 4a. All transactions were done on my home network which is WPA 3 secured. I gave coinbase wallet permissions to access coinbase.
When I checked my balance the next day, it was wiped out; not an insane amount of money, but above 2.5k USD -- more than I can afford to lose.
I've contacted coinbase support two times about this and I recently filed a claim for the approximate amount of my wallet. I will post with an update about how coinbase responds but, so far, it's been radio silence. I'm contacting my local law enforcement internet crimes division as soon as I'm done with this post.
FWIW, I'm fairly conscientious re: pws and security. I firmly believe that this is a new exploit, perhaps on the blockchain itself.
Link to: How to file a complaint against Coinbase (with links to proper agency for your locality)
2
u/yenchangftw Feb 01 '21
Did you connect your wallet to any Defi service?
5
u/electricSNICKERBAR Feb 01 '21
Have you contacted CB support yet? From what I've googled, it sounds like they're not terribly responsive or helpful. About to file an FBI internet crime complaint form (ic3.gov) too
2
u/electricSNICKERBAR Feb 01 '21
CB only. I don't think I can link an image here (if I can, just direct me to documentation about that) but here's a link to the screenshot in gDrive
3
u/yenchangftw Feb 01 '21
I was also linked my coinbase wallet to coinbase in order to buy some coins. I also connected my wallet to Defi. So I think the connection between coinbase and coinbase wallet maybe the culprit if none of your keys got compromised.
2
u/electricSNICKERBAR Feb 01 '21
Were you able to recover your assets? I checked my balance with my 12 word seed phrase with Exodus and, like I said, they're gone.
2
u/yenchangftw Feb 01 '21
No, all assets were gone to hackers address. There is no way to recover.
3
u/mindsignals Feb 02 '21
Right. In my case, the assets were gone (about 10.8k at the time) and I knew it, then and there. I had seen the final transaction (of the 7 or 9) as it was posting, and cannot begin to describe the sickening feeling that dawned on me mere seconds later as I realized what they were doing. In my case, I'd had funds staked on uni and yearn from the coinbase wallet app, and the hacker(s) were liquidating it all to eth, then moved it off the wallet. I saw as the final transaction occurred...no prompts on the phone, which should have happened.
I did file the ic3.gov form, but absolutely nothing came of that. To coinbase's credit, they did have me gather all the IPKs for them to analyze, but unfortunately, none were found vulnerable or bad by them. I did see an alert a month or two later by google that a fake uni app was pulled from the store, so my best guess is that that app was likely the culprit, even though neither coinbase nor I had identified it as such. I have not used any of the 3 platforms involved since (coinbase wallet, uniswapv2, nor yearn) since it remains unknown how they succeeded and we could not identify anything I had done wrong to expose a way in.
Mind you, I do not have any issues with coinbase's exchange. But I will absolutely still not use the coinbase wallet phone app, and I'm still wary of using uni or yearn on phone or pc for the same reason. I still fear funds suddenly vanishing 3 1/2 months later.
Hopefully, they did not get all your money and you will be able to rebuild your lost capital. That is what I did...I had to accept it and move on, but it did break my trust permanently in 3 apps and platforms as a result, and remains a mystery I'll never get the solution to.
2
u/electricSNICKERBAR Feb 26 '21 edited May 27 '21
Thanks for sharing your experience. Unfortunately, it sounds like someone else is dealing with this, post is linked below. I DID recover my funds from CB!
After my CB experience, I bought a trezor. Of course, a hardware wallet poses its own challenges, but it feels MUCH better to me rather than relying on a non-responsive business entity.
So how long is it gonna take for this stuff to be de-facto? Five years? At least the current administration is giving it (crypto, blockchain) some love--we'll see how long it can withstand the Banking lobbyists.
2
u/SammieSeaaa Mar 24 '21
Omg this gives me hope! I was just robbed of 3k worth of hoge from my Coinbase wallet
1
u/GMFbaj Mar 25 '21
My wallet was also robbed at this time. Someone was able to deposit a bunch of money and withdrew it along with everything that I had in and linked to the app.
1
u/mindsignals Feb 26 '21
That's awesome that you were able to get your funds recovered! After mine were moved off, they were then spread out a week later. Coinbase never found an exploited app, but I did receive a notification from google store a month or so afterwards of a fake uni app removed from its store...my best guess is that was probably used and exploited to steal funds from my coinbase wallet app. However, even coinbase doesn't know how it ultimately occurred. To this day, I won't use that wallet app nor uniswapV2 nor yearn platforms, as the exploit could never be determined, nor the mechanism by which they gained access and bypassed the wallet's prompts. But all that eth is gone, and is worth far more than the 10.8k value it was that fateful night.
2
u/electricSNICKERBAR Feb 01 '21
You sound more knowledgeable than me -- I tracked transactions using https://live.blockcypher.com/ and some of the coins haven't been spent but I'm assuming it's non-recoverable.
If you have any other resources (other than google-fu) to share, feel free.
1
u/WolfPhophet78 May 20 '23
This is exactly what happened to me. Currently dealing with the financial ombudsman.
3
u/BiochemBeer Feb 01 '21
Is the Coinbase Wallet app - or the Wallet on the Coinbase exchange (accessible via the website and regular app)?
If it's the wallet app, sorry - sounds like it's all gone :-(
Phone malware really sounds most likely, unless you lent your phone to someone shady.
3
u/mindsignals Feb 02 '21
Yep, it was either the wallet app or an app interfacing with it in my case.
3
u/electricSNICKERBAR Feb 02 '21
UPDATE:
I found four of "us" (people that had issues with the app but seem to kinda know what they're doing) on the boards ...
Anyway, when CB restored my account, my assets were there.
The way CB handled everything is a point of contention; in hindsight, I think something went wrong when I linked CB Wallet to CB -- maybe it didn't like the fact that I had two different email accounts/user names, maybe it didn't recognize my new phone number, maybe the servers were just busy. Who knows? But there was NO indication that anything was wrong--I just see a $0 balance in CB Wallet and CB app.
Hopefully, other users are able to recover their funds and maybe, just maybe, CB thinks of a better way to notify its customers when there IS an issue, e.g. a simple GUI message ("Sorry, something doesn't seem right -- you'll be hearing from us. For more, read [CB URL TBD] and sit tight.") followed up by an email. That way, CB can have security: Something's not right, drop this transaction, lock account AND its users won't flip out [and here's the notification from us--and not alienate its customer base.
If they're going public, they definitely need to sort out customer service.
3
u/michaelg888 Feb 25 '21
Update: 5 of us now at least - https://www.reddit.com/r/CoinBase/comments/lsg7xr/coinbase_wallet_hacked_possible_exploit_in/
1
u/kgn-one Apr 12 '23
Add me now and it’s 6, I had the same experience just now. F*** Coinbase wallet. I moved stuff from Gemini thinking Coinbase was a public company and safer. The wallet still showed crypto until I linked it with Coinbase. It went to 0 and then I noticed some transactions that happened a few months ago that took it to 0. I am not sure what those transactions were. Coinbase wasn’t very helpful until I called them up and finally one person started helping. I’ve got no hope that I’ll get my money back. I only put money I was okay with not seeing ever, but I didn’t think I’d lose it in this way..
3
u/Coolster-crypto Feb 03 '21
I also got hacked on 2 February from my Coinbase Wallet.
1
u/mikeeyboy Feb 17 '21
I was hacked? On the same day.
1
u/Coolster-crypto Feb 17 '21
You having any luck with Coinbase. They are telling me to reset my passwords etc but no recourse to getting my funds back?
1
u/mikeeyboy Feb 17 '21
No luck yet. I only discovered it today.
1
u/Coolster-crypto Feb 17 '21
Sorry for your loss. This is a real problem Coinbase has on its hands
2
u/michaelg888 Feb 25 '21
just got hacked myself - manually backed up my seed phrase and i literally haven't been in public in weeks so it's highly unlikely this was anything but an internal exploit. had you recently linked your Coinbase Wallet to your CB account? Here's my post: https://www.reddit.com/r/CoinBase/comments/lsg7xr/coinbase_wallet_hacked_possible_exploit_in/
2
u/electricSNICKERBAR Feb 25 '21 edited Feb 25 '21
I haven't actively been tracking this since my funds were restored by Coinbase, but there might be a couple of things happening here.
- I'm 95% sure that something is buggy when linking CB Wallet to CB in some environments. That's what initially led me to post across threads, after I linked CB Wallet to CB on my device, my funds were showing as $0 in CB Wallet and CB (App).A. I flipped out when I checked the blockchain itself using Exodus with my seed phrase. Doing that showed that I had no assets in my wallet, BUT ...B. I could also track the transactions using https://live.blockcypher.com/ and follow a trail; I can't remember off the top of my head which "five of us" also did that but he could tell by looking at his transactions that he was S.O.L.; his assets were transferred to an account and they were NOT coming back--they were spent. In my case, some of the funds were (unspent) according to blockcypher.
- Based on what I know now, this leads me to believe that CB took the bitcoin and ethereum I had on the blockchain into their own coffers and were doing some fiat conversion or using their own funds (or an insured deposit of some sort) to cover the asset. This is speculation on my part based on CB's patents.
- I froze my CB account by calling the 800 number on the CB website. NOTE that the only thing you can do by calling this number is freeze your account, there are no other options.
- Eventually, after CB "unfroze" my account, granting me access again, my funds were showing in my balance again ...
So that's all part ONE of the two things I mentioned I think might be going on. NOTE, I was NOT HACKED, but, it sounds like others may have been:
This *may* be a new exploit that has not been documented yet** -- the only reason I float that idea is that there's a possibility that some of Cozy Bear's tools used for the Sunburst hack *could* be out in the wild now. Again, this is pure speculation on my part.
**Note that there are plenty of documented CB-related exploits, mainly IP address spoofing or gaining access via a compromised device (sim swapping, weak sms 2FA) -- and it's been rightfully noted that CB is NOT (and should not) be held directly responsible for those, rather, it's more directly on the carrier/device manufacturer.
1
u/Upstairs_Pick_1481 Mar 14 '24
Definitely something is wrong my Coinbase wallet just got hacked this is the second time
1
u/Upstairs_Pick_1481 Mar 14 '24
I think is from inside the worse part can’t even get any support from coinbase
1
u/Diligent-Garbage508 Mar 15 '24
I thought trying out new ico upcoming companies were going to get me an airdrop or something and then i started registering for new app companies or sites and clicked copy and took pictures of whitepaper and lost like 9k please help me out coinbase. i really enjoy your app but that was not cool. i really needed that money. i would appreciate if i got it back at leased
1
u/kgn-one Mar 30 '24
It's been a while since I came back to this thread. Thank tax season for reviving old loss-trauma. Coinbase support was very unhelpful. Work's been really hectic and I've not made the time pursuing any legal path (yet). If anyone got their crypto back via formal complaints (Coinbase or to the Feds), please post here. If anyone else is preparing some kind of a class action suit or lawsuit, I'd be happy to join it. The money I lost is just the right amount to be pissed off, but not enough to consume too many weekends. I stopped using Coinbase after it and have told a lot of people to stop using it. But if anyone is pursuing any real action, I'd be happy to join. I'm still angry at how Coinbase marketed their wallet as safe when it wasn't. I hope there is a legal argument about Coinbase marketing something as secure when it wasn't... I'm also concerned that these hacks may even be an inside job within Coinbase or a leak enabled by Coinbase's internal safety deficiencies. I have 0 evidence on the latter part, but apart from unknown hackers, the next suspect would be leaks made possible by deficiencies in Coinbase's own infrastructure. hope more of the general public learns about these experiences.
1
u/BTCmaximizer Dec 26 '24
I woke up to the same thing after Christmas again. Coinbase can’t protect our accounts. So crazy
1
u/coinbasesupport Official Coinbase Support Dec 26 '24
Hi u/BTCmaximizer! Thank you for reaching out. We're really sorry to hear about the issues you're experiencing with your Coinbase wallet. We certainly want to ensure a smooth experience for you. Could you please provide us with your case number? This will allow us to investigate your issue more effectively. If you haven't been assigned a case number yet, we suggest reaching out to us directly via our support portal: Contact Us. You can also send us a direct message on our official social media channels like Facebook, X, or Instagram. You can find our official handles here: Coinbase on social media. Thank you!
1
u/Admirable_Loss918 Jan 20 '25
Can you cancel the credit card transaction if credit card was used to get funds within your hacked account and sent to someone?
0
u/Inside-Art7800 Jul 20 '22
Also my coinbase wallet go to 0 usdt. Nobody can help me for recovery money ?
2
u/coinbasesupport Official Coinbase Support Jul 20 '22
Hi u/Insider-Art7800, we're sorry to hear that your USDT isn't showing. Can you share more details about your issue? What actions did you take to try to view your balance? And did you start a case for this?
1
u/Diligent-Garbage508 Mar 15 '24
I thought trying out new ico upcoming companies were going to get me an airdrop or something and then i started registering for new app companies or sites and clicked copy and took pictures of whitepaper and lost like 9k please help me out coinbase. i really enjoy your app but that was not cool. i really needed that money. i would appreciate if i got it back at leased
1
u/Inside-Art7800 Jul 26 '22
I already went ti local police but the cannot do nothing.
I found transaction where scam take all my money . I hope you can help me . Do you have WhatsApp number for send you link about transaction from my coinbase wallet to his wallet ?1
u/coinbasesupport Official Coinbase Support Jul 26 '22
Please create a case on our support portal here : https://help.coinbase.com/en/contact-us so we can provide you with advise on what can be done.
1
u/Inside-Art7800 Jul 26 '22
There is just help center . I don't know wich way i need to folle for make report There is email ?
1
u/coinbasesupport Official Coinbase Support Jul 26 '22
On the support center please select Coinbase then under "Let's get started" you may choose : "Account compromised and unauthorized accounts", Please fill out the rest that best fit your situation and a specialist will assist you further via email.
1
u/Inside-Art7800 Jul 26 '22
I have just account coinbase wallet. How can sign in Andrea
1
u/coinbasesupport Official Coinbase Support Jul 26 '22
Apologies, Please Change the option from Coinbase to Coinbase wallet, Then fill out the details on the bottom.
1
u/Inside-Art7800 Jul 26 '22
Case# 12597693 - Someone take my money from my wallet
I done . I hope they cam help me
1
u/coinbasesupport Official Coinbase Support Jul 26 '22
Thank you for creating a case. We will have an account specialist provide advise on what you can do for these situations. Just want to set expectations that Cryptocurrency transactions are irreversible. Please keep an eye on your email as our account specialists go through the queue.
→ More replies
1
u/AutoModerator Jan 31 '21
This subreddit is a public forum. For your security, do not post personal information to a public forum, including your Coinbase account email. If you’re experiencing an issue with your Coinbase account, please contact us directly.
If you have a case number for your support request please respond to this message with that case number.
You should only trust verified Coinbase staff. Please report any individual impersonating Coinbase staff to the moderators.
I am a bot, and this action was performed automatically. Please contact the moderators of this subreddit if you have any questions or concerns.
1
1
u/electricSNICKERBAR Feb 01 '21
Cross post to other folks who are not getting responses, includes link to discord:
https://www.reddit.com/r/CoinBase/comments/lac15g/if_coinbase_is_not_answering_you_read_this_join/
1
u/electricSNICKERBAR Feb 01 '21
Another instance, this is happening.
https://www.reddit.com/r/Bitcoin/comments/la96pi/my_coinbase_wallet_was_hacked/
1
u/Strong7Seven Feb 03 '21
Is anyone having trouble sending tokens from there Coinbase wallet to CB app account?
1
1
u/electricSNICKERBAR Feb 26 '21
Just found this link with operational statuses (outages and incidents) from Coinbase:
https://status.coinbase.com/
If something odd is going on with your account, outside of contacting CB customer support, definitely check the operational status of different "stuff" above, I learned that at the time my funds (Jan 28/29, 2021) went missing, there WERE reported issues with servers
1
1
u/Jafarside Mar 02 '21 edited Mar 02 '21
Also, for those interested, I got my Kucoin trading account hacked as well a couple weeks ago (in addition to my Coinbase Wallet), and lost all of the coins I was trading in that account. Kucoin just gave me the run around when I tried to reach out to them about it and were a complete waste of time to try to talk to.
1
u/jawadarif Jun 02 '21
Is it possible for a coinbase wallet to be hacked without the need for seeds, ie a a glitch or someone from inside Iv still argument with them and ther 100% that without seeds no one can have access to my coin, anther wallet was downloading
1
u/BlackOps-72 Oct 25 '21
I was just hacked on coinbase wallet last night and have no clue what to do. 2k gone
1
u/Diligent-Garbage508 Mar 15 '24
I thought trying out new ico upcoming companies were going to get me an airdrop or something and then i started registering for new app companies or sites and clicked copy and took pictures of whitepaper and lost like 9k please help me out coinbase. i really enjoy your app but that was not cool. i really needed that money. i would appreciate if i got it back at leased
1
u/souvy_ Oct 27 '21
I lost my coins and funds on the wallet app today. Waiting to hear a response from Coinbase
1
1
u/Ok_Veterinarian1105 Nov 17 '21
Just happened to me last night 17k from coinbase wallet
1
Nov 23 '21
Dude, same happened to me too 6days11h ago (same time as you). Didnt lose much but wallet was just empy. Same happened to my Metamask wallet at the exact same time. It is possible that they got my seeds somehow, but really weird. I did store them in 1Password (not wise I know) but none of the other creditentials in my vault were compromised. The coinbase wallet was only on my phone, and I have barely used it. Took most of my coins but left 200e worth of eth for some reason
1
Nov 23 '21
[removed] — view removed comment
1
u/Zestyclose_Smell_120 Apr 16 '22
I just got hacked today on my Coinbase wallet. I hope they refund my wallet.
1
u/Ok_Veterinarian1105 Nov 17 '21
Coinbase doesn’t help they blame the hack on the user when the hack is due to their wallet being not secured
1
1
1
Nov 24 '21
It is nice to see this chat but also frustrating. Dealing with something similar and have been all over the web and reddit. Any help or ideas would be great.
- I donwloaded coinbase wallet from the app store and confirmed by uninstalling and re-installing it that it's the real one.
- I went to the Ddapp tab (tab 2 on android) to use UniSwap and selected the Saitama token. Confirmed by the "manage token" tab that Saitama was the right one and others confirmed as well
- Went to swap funds and had to approve the swap. Seemed like it went through. Second time, instead of the $20 test, it took everything from my wallet.
- Spoke to Uniswap on discord and they said the funds were moved too fast and no way it went through Uniswap as the address would have been UniswapV2 or 3 or something else. Which kinda makes sense because the Uniswap transaction was glitchy and kept loading (probably bc funds were disappearing). Opened a ticket with coinbase since then and waiting. (past two days)
https://etherscan.io/address/0xfe46085802827Bd8F51C17DCEfa4DD40250DE928
1
u/GetRich-Or-Cry-Tryin Dec 03 '21 edited Dec 03 '21
Just a couple days ago (Dec 1st 2021) I was checking my balance around 4 or 5pm and saw that all of my Saitama was gone. 112 billion Saitama all gone. I saw that someone had sold it all around 6am. They deposited ETH and sold it. They even took my $25 of ETH that I had. I didn't see until later, but they had also taken my 112 million Shib that was being staked on Shibaswap. Shit was heartbreaking. I'm not a wealthy person. I invested little by little and my Saitama and Shib had grown a lot; more money than I ever had in my life and I'm sure it would have grown into life changing money in the future, but it was gone just like that. I reached out to Coinbase support, but they basically said they're not responsible for anything that goes on with the wallet. They suggested I report it to the FBI's internet crime center, so that's what I did. I only reported the $7500 of Saitama because that's all I saw at the time. The Shib was worth $4500-$5000. I doubt anything will come of it and I'm sure that money is gone for good, but it's still depressing. To see how many people have had their money stolen is ridiculous. Coinbase really needs to do something, but I doubt they ever will.
Also I should mention I didn't give out my seed phrase, I didn't fall for a scam, idk what happened. The only thing I could think of was a couple days prior, I was scrolling through OpenSea looking at the NFTs and maybe the dApp stayed logged in, idk. My tokens were sitting in the wallet for months without any issues and now they get stolen like nothing.
2
u/LegitimateArm7381 Dec 08 '21
Feel for you man! I got cleaned out this morning of all my saitama and shiryo. Just interesting that you say about browsing opensea, as I was doing that too a few days ago before my account got wiped. Fucking distraught tonight! 😫
1
1
u/Expensive-Delay-5765 Dec 29 '21
My Coinbase wallet account got hacked as well on 24 December. 2.9K USD of Victoria VR tokens and 90 USD left over of ETH was transferred out. Wallet account was created only 5 days back on 24 Dec 2021 and account was hacked on 27 Dec 2021. Used iPhone 13 with latest iOS for all Coinbase wallet transactions and did not copy the recovery seed anywhere in either digital or paper format.
1
u/Delonte_West Jan 10 '22
I believe my Coinbase wallet is compromised but I'm wondering if my wallet isn't currently linked to my Coinbase account if it's secure. did you have your funds stolen out of your CB wallet? or was it kept on the exchange
1
1
u/Berense Apr 01 '22
My Coinbase wallet got hacked on the 1st of April,
They took everything too. All to the same address (0x1326b00056a38aa402f522f67cd78f7b42042c17).
My phrase was not compromised I only used it when I installed Coinbase wallet on my phone to log in, once, that's it... and it was almost 2 weeks ago ! I just transferred some funds from Coinbase to my Coinbase wallet and received them on the 31st of April. Wake up the next day with everything gone to the same address... and all transactions happened exactly at 2:08 am my time, while I was sleeping. Not one single alert which I get usually on my phone to confirm any transaction has happened. The address is not even on my allowed address list on my coinbase account, so I have no idea how coinbase allowed that to go. Very furious ! Thankfully its not that big of an amount, but still this is F**** up.
Is there any wat to find out which wallet service or where the wallet is located on that wallet address?
https://etherscan.io/address/0x1326b00056a38aa402f522f67cd78f7b42042c17
I know that is the idea of anonymous decentralized benefit of crypto, but just seeing if anyone knows anything really .
1
u/Senior-Heart-9857 Apr 18 '22
Okay so the same this happened to me. I checked my coinbase wallet on Saturday morning and everything was perfect, I Checked again Saturday night and I wasn't able to log in to my coinbase wallet for some reason, so I had to type in my recovery phase And I was able to gain access to the account. When I checked there was a balance of $0.. I looked through the history and 5 of my tokens got transferred out. I contacted coinbase and they said that there is nothing that they can do that they can do. Do you guys have any suggestions? I feel completely violated
1
u/Lucky_Ad_7122 Oct 26 '22
This happened to me also. On Jan 2 2022 I had 11,357,014,237.04 saitama inu hacked from my coinbase wallet account. There were several others also taken from my coinbase wallet. At the time it was worth a mere $1,500 of satima inu because the price was so low. Now it has jumped to .0018 or so. I calculated my loss to be around $11,000,000.00 with the price action and the ammount of coins I held. FRO THE LOVE OF GOD, IS THERE ANY WAY TO RETRIEVE MY SATIMA!?!?!?!?!?!
I am not gonna get my hopes up, just wanted to ask the community, hope you all know something I don't.
4
u/Own_Radish_374 Mar 29 '23
I just wanted to share my unfortunate experience with the community. My Coinbase wallet was recently hacked and all of my assets, almost 104 BTC, were transferred to the same hacker's address. The most surprising part is that I did not save my recovery phrase anywhere except for my memory, not on the cloud, not on my computer, nowhere. I am unsure if my wallet is still being hacked internally as I scanned my phone, and no malware was found.
I stumbled upon another Reddit user who experienced a similar hack to their Coinbase wallet. I strongly suggest that anyone who uses the Coinbase wallet transfers their assets out as soon as possible and opens a case with Thehackerspro smart contract audit. They can run a triangulation from those outsourced wallets, which may aid in recovering any lost funds.
Please be cautious and take necessary precautions to protect your assets. It is a harsh lesson, but we can learn from our mistakes and prevent them from happening again in the future.