Coinbase: data theft cost $307m in Q2 report

Coinbase reported a US$307 million cost from a data breach in its second-quarter 2025 earnings, attributing the incident to cyber criminals bribing offshore customer service representatives.

Coinbase is a US-based cryptocurrency exchange platform.

The breach, disclosed in May, was previously estimated to cost as much as US$400 million.

The company also saw a decline in spot trading volume and revenue during the quarter, with total revenue down 26%, transaction revenue falling 39%, and cryptocurrency spot volumes dropping by over 30% compared to the previous quarter.

Net income for the quarter reached US$1.43 billion, up from US$66 million last quarter and US$36 million in the same period last year.

Trading volumes for the quarter were US$237 billion, compared to US$226 billion in the second quarter of 2024.

Coinbase shares declined over 3% in after-hours trading, last traded at US$363.80, but remain up more than 40% year to date.

🔗 Source: The Block

🧠 Food for thought

1️⃣ Exchange security breaches remain a persistent industry cost despite maturation

Coinbase’s $307 million data breach loss places it among the costliest security incidents in crypto exchange history, though not the largest.

The Coincheck hack in 2018 resulted in approximately $500 million in stolen NEM tokens, while the Mt. Gox collapse in 2014 involved 850,000 lost Bitcoins 1. Since 2017, hackers have stolen nearly $2 billion worth of cryptocurrency primarily from exchanges, with two active cybercrime organizations alone accounting for roughly $1 billion in theft 2.

What makes Coinbase’s incident particularly notable is that it stemmed from social engineering rather than technical vulnerabilities. Criminals bribed offshore customer service representatives to access user data and account management records.

This demonstrates how security threats have evolved beyond purely technical attacks to exploit human elements in the operational chain. It suggests that even well-funded exchanges with strong technical infrastructure remain vulnerable to sophisticated social engineering campaigns.

2️⃣ Platform expansion reflects intensifying competition for market share

Coinbase’s push to become an “everything exchange” directly responds to competitive pressure from platforms that offer lower fees and broader asset selection.