Coinbase

Security incidents tagged Coinbase. Newest first.

0 Coinbase incidents in the last 12 months

Critical 4 · High 3 · Med 2 · Low 1 · Update ½Severity-weighted: critical 4 · high 3 · medium 2 · low 1 · update ½LessMore

Show 2 older incidents

May 11HighCoinbase: bribed support contractors leak data of 69,461 customers, $20M ransom refusedNo fix needed
Coinbase customer support systems No fix needed
Criminals bribed overseas support staff to pull customer data (names, contact details, partial financial data, ID images, balances and transactions), then demanded $20M. Coinbase refused, offered a matching bounty, and estimated $180M to $400M in costs. No passwords, private keys or funds were accessed directly.
Open incident →

CriticalPatched
tj-actions/changed-files compromised: CI secrets dumped in 23,000+ repos' logs
Attackers repointed the version tags of the popular tj-actions/changed-files GitHub Action to a commit that dumped runner memory, printing CI/CD secrets into workflow logs. It started with the compromise of reviewdog/action-setup and was aimed at Coinbase's agentkit repo first. Over 23,000 repositories used the action.
tj-actions/changed-files GitHub ActionClosed Mar 20, 2025updated Mar 20, 2025