Verify a decision

{"actor":"system:backfill","investigation_id":"34a1d395-ed34-4277-a8ff-7adb35a32f66","kind":"publish","page_slug":"coinbase","published_at":"2026-05-19T15:39:35.239Z","sequence_num":1,"snapshot":{"content_type":"investigation","entity_name":"Coinbase","sections":[{"content":"","heading":"","severity":"medium","sources":[]},{"content":"","heading":"","severity":"medium","sources":[]},{"content":"","heading":"","severity":"medium","sources":[]},{"content":"","heading":"","severity":"medium","sources":[]},{"content":"","heading":"","severity":"medium","sources":[]},{"content":"","heading":"","severity":"medium","sources":[]}],"sources_used":[],"summary":"Coinbase (NASDAQ: COIN) is the largest publicly listed cryptocurrency exchange in the United States, founded in 2012 and regulated across multiple jurisdictions. Despite its regulated status, the platform has been the subject of significant documented concerns: a May 2025 insider-enabled data breach affecting approximately 70,000 users with estimated remediation costs of $180–400 million, ongoing documented losses exceeding $300 million per year from social engineering scams targeting Coinbase users (as reported by blockchain investigator ZachXBT), a $100 million AML compliance settlement with the NYDFS in 2023, and controversies surrounding its Base Layer-2 blockchain including a disputed token launch and a contentious departure from the Optimism OP Stack ecosystem.","timeline":[{"date":"2015-01-01","event":"CFTC later determined Coinbase's automated trading programs 'Hedger' and 'Replicator' began producing wash trades (violations covering January 2015 through September 2018).","source":"","source_url":"https://www.cftc.gov/PressRoom/PressReleases/8369-21"},{"date":"2016-06-01","event":"A Coinbase employee placed intentional matching LTC/BTC trades over a six-week period to simulate liquidity, later found by CFTC to constitute wash trading.","source":"","source_url":"https://www.cftc.gov/PressRoom/PressReleases/8369-21"},{"date":"2021-03-19","event":"CFTC ordered Coinbase to pay a $6.5 million civil penalty for false, misleading, and inaccurate reporting and wash trading.","source":"","source_url":"https://www.cftc.gov/PressRoom/PressReleases/8369-21"},{"date":"2023-01-04","event":"NYDFS announced $100 million settlement with Coinbase over significant AML compliance failures, including inadequate KYC and transaction monitoring deficiencies.","source":"","source_url":"https://www.dfs.ny.gov/reports_and_publications/press_releases/pr202301041"},{"date":"2023-06-01","event":"SEC filed civil enforcement action against Coinbase alleging the exchange listed unregistered securities.","source":"","source_url":"https://www.sec.gov/newsroom/press-releases/2025-47"},{"date":"2024-09-01","event":"Insider data theft at Coinbase began, with a TaskUs contractor in India photographing and selling customer records to outside threat actors for approximately $200 per image.","source":"","source_url":"https://beincrypto.com/coinbase-data-breach-insider-plot-court-documents/"},{"date":"2025-01-01","event":"TaskUs discovered the breach internally; at that point a single phone held data on more than 10,000 Coinbase customers.","source":"","source_url":"https://beincrypto.com/coinbase-data-breach-insider-plot-court-documents/"},{"date":"2025-02-03","event":"ZachXBT published findings on Coinbase social engineering scams, estimating $300M+ in annual user losses and documenting $65M stolen between December 2024 and January 2025.","source":"","source_url":"https://www.coindesk.com/markets/2025/02/04/coinbase-users-are-losing-usd300m-a-year-to-social-scams-zachxbt-says"},{"date":"2025-02-27","event":"SEC announced dismissal of its civil enforcement action against Coinbase, citing formation of its Crypto Task Force. The dismissal explicitly did not constitute any assessment of the merits of the original claims.","source":"","source_url":"https://www.sec.gov/newsroom/press-releases/2025-47"},{"date":"2025-04-07","event":"ZachXBT publicly criticized Coinbase over undisclosed data breach and account lockouts, stating users were being restricted without knowledge that their data had been compromised.","source":"","source_url":"https://news.shib.io/2025/04/07/zachxbt-slams-coinbase-over-account-lockout-and-data-breach/"},{"date":"2025-04-16","event":"Base's 'content coin' launched via Zora, reached $17.1M market cap, then collapsed approximately 90% within 20 minutes; pump-and-dump allegations followed, with three wallets identified as profiting approximately $666,000.","source":"","source_url":"https://fortune.com/crypto/2025/04/19/coinbase-zora-base-content-coin-jesse-pollak/"},{"date":"2025-05-11","event":"Threat actors contacted Coinbase demanding a $20 million Bitcoin ransom, claiming possession of customer data obtained via bribed support employees.","source":"","source_url":"https://investorclaims.com/blog/coinbase-data-breach-comes-with-20m-ransom/"},{"date":"2025-05-14","event":"Coinbase disclosed the data breach via SEC Form 8-K. Approximately 69,461–70,000 customers affected. Estimated remediation costs: $180M–$400M. Coinbase declined to pay ransom and announced a $20M bounty for information on perpetrators.","source":"","source_url":"https://www.sec.gov/Archives/edgar/data/0001679788/000167978825000094/coin-20250514.htm"},{"date":"2025-05-27","event":"Class action lawsuit filed against Coinbase in connection with the data breach, alleging securities disclosure omissions, covering investors from April 14, 2021 to May 14, 2025.","source":"","source_url":"https://www.theblock.co/post/355687/coinbase-sued-class-action-data-breach"},{"date":"2026-02-18","event":"Coinbase announced Base would migrate away from Optimism's OP Stack to an independent technology stack. OP token fell 20–25% on the announcement, and the Optimism Collective faced projected loss of significant future revenue.","source":"","source_url":"https://www.coindesk.com/business/2026/02/18/coinbase-s-base-moves-away-from-optimism-s-op-stack-in-major-tech-shift"}]},"v":1}