Coinbase Suffers Devastating Cyberattack
Coinbase, a giant in the world of crypto exchanges, is going through a major crisis. The platform has confirmed a sophisticated cyberattack that allowed hackers to manipulate employees abroad, steal customer data, and demand a $20 million ransom.
The attack, disclosed on May 15, 2025, targeted foreign-based support agents who were bribed to disclose personal data of a “small subset” of clients, which is less than 1% of the 100 million monthly active users.
Although private keys and funds remained intact, information such as names and emails was compromised. Coinbase estimates the financial impact between $180 to $400 million for reimbursing affected clients. “We refuse to give in to the hackers and are offering $20 million for their arrest,” the company stated on X.
This attack is part of a wave of record cybercrime. According to Chainalysis, 2024 saw $2.2 billion stolen in 303 crypto incidents, a 21% increase from 2023.
Eric Jardine, a researcher at Chainalysis, notes: “Private key compromises, often through phishing, account for 43.8% of losses.” Bo Pei, an analyst at U.S. Tiger Securities, adds: “This attack exposes flaws in employee control and risks staining Coinbase’s reputation.” To counter these threats, experts recommend offline storage and multisignature wallets.
SEC Investigation Casts Doubt
Simultaneously, an SEC investigation into potentially misleading user metrics further weakens the company. These events caused a 7% drop in Coinbase’s stock price in just one session, shaking its leadership position.
Indeed, the SEC is investigating Coinbase’s user metrics, specifically the claim of having 100 million “verified users.” Paul Grewal, the legal chief, clarifies that this metric, abandoned two years ago, included anyone who verified an email or phone.
“This investigation focuses on an outdated metric, fully disclosed,” he asserts. The SEC is trying to determine if Coinbase inflated its figures to attract investors, a charge compounded by a lawsuit in New York for data protection failure.
This double blow – cyberattack and regulatory investigation – tarnishes Coinbase’s image as the platform aimed for inclusion in the S&P 500. With Bitcoin surpassing $100,000, the crypto market is attracting new investors, but these incidents highlight its risks.
The drop in stock, extended by an additional 6.5% post-investigation, reflects market uncertainty. To regain trust, Coinbase must enhance its cybersecurity and clarify its communication, or risk losing ground to competitors.
