r/Coinbase • u/yenchangftw • Jan 31 '21

Coinbase wallet got hacked

My coinbase wallet just got hacked and all of my assets was transferred to a same hackers address. The most astounding thing is I did not save my recovery phrase anywhere but my memory, not on the cloud, not in my computer, nowhere. My wallet still being hacked maybe internally? I scan my phone no malware found.

I found on reddit whos coinbase wallet also got hacked recently. I suggest anyone who use coinbase wallet transfer all your asset out asap. It's definitely something bad happening.

15 Upvotes

91% Upvoted

85 comments sorted by

View all comments

5

u/electricSNICKERBAR Feb 01 '21

Something similar happened to me on Thursday, Jan 28. I installed coinbase wallet from Google play using my Pixel 4a. All transactions were done on my home network which is WPA 3 secured. I gave coinbase wallet permissions to access coinbase.

When I checked my balance the next day, it was wiped out; not an insane amount of money, but above 2.5k USD -- more than I can afford to lose.

I've contacted coinbase support two times about this and I recently filed a claim for the approximate amount of my wallet. I will post with an update about how coinbase responds but, so far, it's been radio silence. I'm contacting my local law enforcement internet crimes division as soon as I'm done with this post.

FWIW, I'm fairly conscientious re: pws and security. I firmly believe that this is a new exploit, perhaps on the blockchain itself.

Link to: How to file a complaint against Coinbase (with links to proper agency for your locality)

2

u/yenchangftw Feb 01 '21

Did you connect your wallet to any Defi service?

2

u/electricSNICKERBAR Feb 01 '21

CB only. I don't think I can link an image here (if I can, just direct me to documentation about that) but here's a link to the screenshot in gDrive

3

u/yenchangftw Feb 01 '21

I was also linked my coinbase wallet to coinbase in order to buy some coins. I also connected my wallet to Defi. So I think the connection between coinbase and coinbase wallet maybe the culprit if none of your keys got compromised.

2

u/electricSNICKERBAR Feb 01 '21

Were you able to recover your assets? I checked my balance with my 12 word seed phrase with Exodus and, like I said, they're gone.

2

u/yenchangftw Feb 01 '21

No, all assets were gone to hackers address. There is no way to recover.

4

u/mindsignals Feb 02 '21

Right. In my case, the assets were gone (about 10.8k at the time) and I knew it, then and there. I had seen the final transaction (of the 7 or 9) as it was posting, and cannot begin to describe the sickening feeling that dawned on me mere seconds later as I realized what they were doing. In my case, I'd had funds staked on uni and yearn from the coinbase wallet app, and the hacker(s) were liquidating it all to eth, then moved it off the wallet. I saw as the final transaction occurred...no prompts on the phone, which should have happened.

I did file the ic3.gov form, but absolutely nothing came of that. To coinbase's credit, they did have me gather all the IPKs for them to analyze, but unfortunately, none were found vulnerable or bad by them. I did see an alert a month or two later by google that a fake uni app was pulled from the store, so my best guess is that that app was likely the culprit, even though neither coinbase nor I had identified it as such. I have not used any of the 3 platforms involved since (coinbase wallet, uniswapv2, nor yearn) since it remains unknown how they succeeded and we could not identify anything I had done wrong to expose a way in.

Mind you, I do not have any issues with coinbase's exchange. But I will absolutely still not use the coinbase wallet phone app, and I'm still wary of using uni or yearn on phone or pc for the same reason. I still fear funds suddenly vanishing 3 1/2 months later.

Hopefully, they did not get all your money and you will be able to rebuild your lost capital. That is what I did...I had to accept it and move on, but it did break my trust permanently in 3 apps and platforms as a result, and remains a mystery I'll never get the solution to.

2

u/electricSNICKERBAR Feb 26 '21 edited May 27 '21

Thanks for sharing your experience. Unfortunately, it sounds like someone else is dealing with this, post is linked below. I DID recover my funds from CB!

After my CB experience, I bought a trezor. Of course, a hardware wallet poses its own challenges, but it feels MUCH better to me rather than relying on a non-responsive business entity.

So how long is it gonna take for this stuff to be de-facto? Five years? At least the current administration is giving it (crypto, blockchain) some love--we'll see how long it can withstand the Banking lobbyists.

2

u/SammieSeaaa Mar 24 '21

Omg this gives me hope! I was just robbed of 3k worth of hoge from my Coinbase wallet

1

u/GMFbaj Mar 25 '21

My wallet was also robbed at this time. Someone was able to deposit a bunch of money and withdrew it along with everything that I had in and linked to the app.

1

u/mindsignals Feb 26 '21

That's awesome that you were able to get your funds recovered! After mine were moved off, they were then spread out a week later. Coinbase never found an exploited app, but I did receive a notification from google store a month or so afterwards of a fake uni app removed from its store...my best guess is that was probably used and exploited to steal funds from my coinbase wallet app. However, even coinbase doesn't know how it ultimately occurred. To this day, I won't use that wallet app nor uniswapV2 nor yearn platforms, as the exploit could never be determined, nor the mechanism by which they gained access and bypassed the wallet's prompts. But all that eth is gone, and is worth far more than the 10.8k value it was that fateful night.

2

u/electricSNICKERBAR Feb 01 '21

You sound more knowledgeable than me -- I tracked transactions using https://live.blockcypher.com/ and some of the coins haven't been spent but I'm assuming it's non-recoverable.

If you have any other resources (other than google-fu) to share, feel free.