When a platform as iconic as Coinbase takes a hit, the shockwave is felt throughout the crypto sphere. In recent months, the platform has been shaken by a data theft case which tarnished its reputation. At the heart of the scandal: a coordinated attack, corrupt agents, colossal digital loot, and above all, a human flaw more than a software bug. The damage was done, but the hunt for the culprits is underway. And the first arrests fall.
In brief
- A customer support agent stole crypto data for a criminal network.
- 69,461 accounts exposed, but Coinbase did not pay the demanded ransom.
- A $20 million bounty launched to identify the cybercriminals involved.
- The deal costs Coinbase up to $400 million in security measures.
Coinbase bares its fangs: an arrest, a clear message
Coinbase had promised: no compromise with the troublemakers, particularly for the authors of last May's hack. And it is the police of Hyderabad, India, who opens the ball with thearrest of ex-customer support employee. According to investigations, this agent was part of an infiltrated network since December 2024, accused of having transmitted sensitive data – names, addresses, identity documents – to cybercriminals.
CEO Brian Armstrong reacted bluntly on X:
We have zero tolerance for malicious behavior and will continue to work with law enforcement to bring perpetrators to justice.
In total, 69,461 users were affected. No stolen crypto funds, but $20 million blackmail not to disclose the data. Coinbase refused to back down, instead launching a matching bounty to identify the culprits. The company has invested between $307 and $400 million for remediation, one of the largest post-cyberattack budgets of 2025.
The strategy is clear: show that even when things are rocky, the platform remains at the helm. And above all, that she would rather pay for justice than for fear.
Crypto, trust and crisis: when humans become the fault
This matter goes beyond just Coinbase. It is shaking up the entire crypto industry. It shows that a company, even listed on the stock exchange, is never safe from a stab from within.
The most worrying? The attack targeted offshore employees, notably via TaskUs, a Texas-based service provider operating in India. The investigation revealed that two of their agents were allegedly recruited by a wider criminal network. Customer support workers transformed into gateways for hackers. A human flaw.
And this is not an isolated case: in another case, Ronald Spektor, 23, was indicted in Brooklyn for having embezzled $16 million in crypto via phishing. Enough to remind the entire crypto community that vigilance must never fall asleep.
Coinbase is not free from criticism. A collective action by its shareholders denounces a lack of transparency on the timing of the disclosure. On the one hand, the platform plays the white knight card; on the other, she must justify her silences. Communication or conviction?
What to remember:
- December 2024: infiltration by corrupt agents begins;
- 69,461 users exposed, but no direct theft of crypto-funds;
- $20 million demanded in ransom – refused by Coinbase;
- Up to $400 million committed to secure, reimburse, clean up;
- Legal action underway against the platform for late disclosure.
Despite this storm, Coinbase remains a pillar of the crypto universe. Far from being content with providing the rearguard, its experts are already betting on the next technological revolutions. Among the 9 technologies that they monitor closely: ZK Proof for more confidentiality, or the scalable smart contract, capable of adapting its rules over time. Enough to nourish the hope of a more robust, more ethical, and less vulnerable ecosystem.
Maximize your Tremplin.io experience with our 'Read to Earn' program! For every article you read, earn points and access exclusive rewards. Sign up now and start earning benefits.
