Coinbase, a leading cryptocurrency firm, reported a cyberattack that could cost between US$180 million and US$400 million.

The attack was revealed on May 11, 2025, with hackers claiming to have accessed customer data through payments to Coinbase contractors and employees.

Hackers obtained data from less than 1% of Coinbase’s customers and used it to impersonate the company and scam users into transferring cryptocurrency.

Coinbase promised to reimburse affected users and rejected the attackers’ US$20 million ransom demand, instead creating a US$20 million reward fund for information leading to arrests and conviction of those responsible.

Coinbase fired the employees involved and warned users to stay alert against scams.

The company said it would never ask customers for passwords, two-factor codes, or asset transfers, and advised locking accounts if suspicious activity is spotted.

The attack happened days before Coinbase joins the S&P 500 index, a major milestone for crypto.

After the news, Coinbase’s stock fell 4.1%, highlighting market concerns.

🔗 Source: BBC

🧠 Food for thought

1️⃣ Cryptocurrency theft has grown into a multi-billion dollar criminal industry

The Coinbase attack is part of a troubling trend showing significant growth in cryptocurrency theft. In 2024 alone, criminals stole approximately $2.2 billion in cryptocurrency across 303 separate hacking incidents, marking a 21% increase from the previous year 1.

The sophistication of these attacks has evolved dramatically since Bitcoin’s early days when simple computer compromises led to thefts, like the 2011 incident where a user lost 25,000 bitcoins (worth $500,000 then) 2.

Today’s average crypto hack nets criminals approximately $14 million per incident, reflecting the industrialization of crypto crime 3.

This evolution mirrors the industry’s growth from niche technology to mainstream financial asset, with hackers increasingly targeting centralized exchanges rather than just individual users or decentralized protocols.

2️⃣ Human vulnerabilities remain the weakest link in cryptocurrency security