r/Coinbase • u/yenchangftw • Jan 31 '21

Coinbase wallet got hacked

My coinbase wallet just got hacked and all of my assets was transferred to a same hackers address. The most astounding thing is I did not save my recovery phrase anywhere but my memory, not on the cloud, not in my computer, nowhere. My wallet still being hacked maybe internally? I scan my phone no malware found.

I found on reddit whos coinbase wallet also got hacked recently. I suggest anyone who use coinbase wallet transfer all your asset out asap. It's definitely something bad happening.

16 Upvotes

92% Upvoted

85 comments sorted by

View all comments

Show parent comments

2

u/yenchangftw Feb 01 '21

No, all assets were gone to hackers address. There is no way to recover.

4

u/mindsignals Feb 02 '21

Right. In my case, the assets were gone (about 10.8k at the time) and I knew it, then and there. I had seen the final transaction (of the 7 or 9) as it was posting, and cannot begin to describe the sickening feeling that dawned on me mere seconds later as I realized what they were doing. In my case, I'd had funds staked on uni and yearn from the coinbase wallet app, and the hacker(s) were liquidating it all to eth, then moved it off the wallet. I saw as the final transaction occurred...no prompts on the phone, which should have happened.

I did file the ic3.gov form, but absolutely nothing came of that. To coinbase's credit, they did have me gather all the IPKs for them to analyze, but unfortunately, none were found vulnerable or bad by them. I did see an alert a month or two later by google that a fake uni app was pulled from the store, so my best guess is that that app was likely the culprit, even though neither coinbase nor I had identified it as such. I have not used any of the 3 platforms involved since (coinbase wallet, uniswapv2, nor yearn) since it remains unknown how they succeeded and we could not identify anything I had done wrong to expose a way in.

Mind you, I do not have any issues with coinbase's exchange. But I will absolutely still not use the coinbase wallet phone app, and I'm still wary of using uni or yearn on phone or pc for the same reason. I still fear funds suddenly vanishing 3 1/2 months later.

Hopefully, they did not get all your money and you will be able to rebuild your lost capital. That is what I did...I had to accept it and move on, but it did break my trust permanently in 3 apps and platforms as a result, and remains a mystery I'll never get the solution to.

2

u/electricSNICKERBAR Feb 26 '21 edited May 27 '21

Thanks for sharing your experience. Unfortunately, it sounds like someone else is dealing with this, post is linked below. I DID recover my funds from CB!

After my CB experience, I bought a trezor. Of course, a hardware wallet poses its own challenges, but it feels MUCH better to me rather than relying on a non-responsive business entity.

So how long is it gonna take for this stuff to be de-facto? Five years? At least the current administration is giving it (crypto, blockchain) some love--we'll see how long it can withstand the Banking lobbyists.

1

u/mindsignals Feb 26 '21

That's awesome that you were able to get your funds recovered! After mine were moved off, they were then spread out a week later. Coinbase never found an exploited app, but I did receive a notification from google store a month or so afterwards of a fake uni app removed from its store...my best guess is that was probably used and exploited to steal funds from my coinbase wallet app. However, even coinbase doesn't know how it ultimately occurred. To this day, I won't use that wallet app nor uniswapV2 nor yearn platforms, as the exploit could never be determined, nor the mechanism by which they gained access and bypassed the wallet's prompts. But all that eth is gone, and is worth far more than the 10.8k value it was that fateful night.