Bitcoin Forum

In the last months there were many stories shared on Bitcoin forums about funds stolen from Coinbase accounts. This concerns anyone who is a Coinbase user or anyone who had been a Coinbase user and closed their account since.

We are a group of former Coinbase users who are victims of such thefts. Every time the theft occurs, Coinbase would apologize, blame the user, stop communicating, and do nothing to help recover the stolen funds.

There is proof that many of the thefts happened because of Coinbase negligence in securing user accounts. We have lawyers working on this case and we are reaching out to all Coinbase users who had Bitcoins stolen from their accounts.

If you lost if you know anyone who lost their Bitcoins on Coinbase, please reply to this post or email coinbase.thefts@gmail.com

Together we might be able to recover all or at least some of the stolen Bitcoins.

This is the first time I am hearing of this
How many affected users do you reckon there are? This is pretty worrying if true

Nice move. This is actually gathering for quite some time. I was advising people for long to use blockchain.info as their choice of online walet over coinbase.com. Activity of Coinbase is very suspicious and the fact I mostly dislike on their service is I dont own the private key for my own coins !!!

https://www.google.com/#q=coinbase+bitcoin+theft

We know of at least a few dozen confirmed thefts so far. Most likely there are many more.

This is crazy. Coinbase employs additional security measures above what would be available if you simply had private keys on your computer or had private keys in your possession.

People are lazy and did not choose strong passwords, or had their email hacked.

I personally had 2FA enabled, API disabled and all security as tight as it can be. Bitcoins were still transferred out of the Coinbase account without me asking. Never received any 2FA codes or calls on my cell. Same happened to many other people. Coinbase just says sorry.

Accessing Coinbase through their API with an account's API key does not require 2FA.

So, when people unknowingly accessed their Coinbase account through a fake site, the thief was able to obtain the user's account, password, and API key and then withdraw funds at any time.

I believed Coinbase fixed the problem by requiring the user to enable the API key before it could be used.

sounds like an argument it not allow a third party to control your private keys

I had the same problem in May 2014. Coinbase was supposed to protect the login with 2FA authentication, but they allowed some hacker to bypass the FA by downloading the android app that did not require authentication at that time, therefore I lost my entire balance of Bitcoins with Coinbase. Coinbase acknowledged the problem and a week later implemented authy that is now required to login. But I ALREADY LOST by BITCOINS, Coinbase did not make any effort to recover my lost Bitcoins due to their negligence. If you are in the same situation as I am, please contact me as soon possible, because we are a well organized group that are getting together to file a complaint against Coinbase. Hope to hear from whoever wants to recover their lost/stolen Bitcoins from the Coinbase exchange based in San Francisco, CA.

Like OP said I guess, they have lawyers looking at this type of thing.  It would certainly be very relevant if they apologized and then implemented the additional security a week after your theft.  Part of the problem is that you don't get much information from entities like Coinbase until you sue them, and then you use discovery techniques to find out what happened. 

You forgot the part where you gave your user name and password to the hacker, and you lost your coins due to your own negligence.

How bout you round up people willing to join a class action for their refusal to patch their api vulnerability that allowed the email address/ Account Holder name to be disclosed through their api with no rate limiting at all, that ultimately resulted in the leaking of 1300 emails/usernames on coinbase. happend april 1, of 2014.

Your coins are your responsibility. Not leaving a significant amount in the hands of a third party is a pretty basic thing.

+1

It is your own fault for giving your coins to coinbase in the first place. This is the nature of bitcoin.

You are implying that Coinbase had something to do with the coins being stolen, when they probably didn't.

He most certainly wasn't. you might have a problem interpreting english correctly if thats what you deducted from his statement. He was scolding the user for leaving so much funds sitting on the wallet of an exchange account.

I've had zero problems with coinbase. You use them to buy coins and then transfer to your own wallet. Easy.

because he just removed it, 2fa should be anabled on account not on withdrawal or deposit or whatever, even bitcointalk should enable 2fa on account, every site should do it, you don't even need a password at that point

We were monitored and cyber bullied all day everyday, it was a very bad experience because everything my family and I had on the cloud, over the internet was compromised. I had to seek help. darkwebssolutions AT gmail provides anti-spy and anti-hack solutions, they also provide the reverse.

OK Sir thank you for the information, may be useful for all, and I will share this information to colleagues who lost too
her recover soon. for to email coinbase.thefts@gmail.com

thank you very much for the information! probably every second there was hurt!

So looks like it was a phishing attack. It is very sad no matter what happened.
Can exchange secure our investment and how much would that cost us as users?