Coinbase Hack

REPORTED LOSS $100K
Low Access Control

What happened

A Coinbase client lost all funds from their account through a SIM port hack.

The attacker ported the victim's SIM card to a phone that they control. The attacker then initiated the password reset flow on the victim's email account. A verification code was sent from the email provider to the victim's phone number — which was intercepted by the attacker. The attacker received all access and drained the Coinbase wallet.

Case & protocol details

Classification CeFi
Protocol Type Exploit/Access control
Official Website www.coinbase.com/
Protocol Twitter/X @coinbase

Evidence & learning

Sources and on-chain records

Build your security review skills

Work through hands-on labs covering real exploit mechanics, review techniques, and defensive patterns.