Got hacked and robbed. My mistake for keeping coins on exchange

[rushingfn]

My coinbase got hacked today. I got a message on my phone saying that my password had changed. I attempted to follow instructions to stop it, but by the time I had, it was too late and the theif emptied out my hot wallet. The only saving grace was that coinbase has vaults which give 48 hour delay. I wish that I would have transferred more coins to the vault as they were protected. Coinbase has some serious vulnerabilities, but whoever the thief was was able to login from my IP and was able to login to my email despite the fact that I had just changed my password. Be careful out there. Cold wallet your coins.

[eckmar]

My coinbase got hacked today. I got a message on my phone saying that my password had changed. I attempted to follow instructions to stop it, but by the time I had, it was too late and the theif emptied out my hot wallet. The only saving grace was that coinbase has vaults which give 48 hour delay. I wish that I would have transferred more coins to the vault as they were protected. Coinbase has some serious vulnerabilities, but whoever the thief was was able to login from my IP and was able to login to my email despite the fact that I had just changed my password. Be careful out there. Cold wallet your coins.

It's never a good idea to store coins on exchange. However I doubt Coinbase has serious vulnerabilities. What happened is that you most likely got infected with a RAT. Its not a problem for the hacker to log in with your IP and your email really. Ways to prevent this is usage of 2FA

[rushingfn]

My coinbase got hacked today. I got a message on my phone saying that my password had changed. I attempted to follow instructions to stop it, but by the time I had, it was too late and the theif emptied out my hot wallet. The only saving grace was that coinbase has vaults which give 48 hour delay. I wish that I would have transferred more coins to the vault as they were protected. Coinbase has some serious vulnerabilities, but whoever the thief was was able to login from my IP and was able to login to my email despite the fact that I had just changed my password. Be careful out there. Cold wallet your coins.

It's never a good idea to store coins on exchange. However I doubt Coinbase has serious vulnerabilities. What happened is that you most likely got infected with a RAT. Its not a problem for the hacker to log in with your IP and your email really. Ways to prevent this is usage of 2FA

I do use 2FA. I need google authenticator every login. I wish it would have been SMS. I'm not sure how this happened. I just wish I would have kept more of them in a vault, or sold my hot wallet contents earlier.

[mk4]

My coinbase got hacked today. I got a message on my phone saying that my password had changed. I attempted to follow instructions to stop it, but by the time I had, it was too late and the theif emptied out my hot wallet. The only saving grace was that coinbase has vaults which give 48 hour delay. I wish that I would have transferred more coins to the vault as they were protected. Coinbase has some serious vulnerabilities, but whoever the thief was was able to login from my IP and was able to login to my email despite the fact that I had just changed my password. Be careful out there. Cold wallet your coins.

It's never a good idea to store coins on exchange. However I doubt Coinbase has serious vulnerabilities. What happened is that you most likely got infected with a RAT. Its not a problem for the hacker to log in with your IP and your email really. Ways to prevent this is usage of 2FA

I do use 2FA. I need google authenticator every login. I wish it would have been SMS. I'm not sure how this happened. I just wish I would have kept more of them in a vault, or sold my hot wallet contents earlier.

I'm pretty sure you're alot more likely to be easier to be hacked if you're using SMS authentication rather than Google's 2FA.

There's like a 90% chance that the problem is on your side and not Coinbase's. If Coinbase actually got hacked then the news should be spreading fast like wildfire. Any chance that you're using the same password in multiple websites? Also, definitely do a malware scan on your computer asap.

[nydiacaskey01]

My coinbase got hacked today. I got a message on my phone saying that my password had changed. I attempted to follow instructions to stop it, but by the time I had, it was too late and the theif emptied out my hot wallet. The only saving grace was that coinbase has vaults which give 48 hour delay. I wish that I would have transferred more coins to the vault as they were protected. Coinbase has some serious vulnerabilities, but whoever the thief was was able to login from my IP and was able to login to my email despite the fact that I had just changed my password. Be careful out there. Cold wallet your coins.

It's never a good idea to store coins on exchange. However I doubt Coinbase has serious vulnerabilities. What happened is that you most likely got infected with a RAT. Its not a problem for the hacker to log in with your IP and your email really. Ways to prevent this is usage of 2FA

I do use 2FA. I need google authenticator every login. I wish it would have been SMS. I'm not sure how this happened. I just wish I would have kept more of them in a vault, or sold my hot wallet contents earlier.

So I guess what happened is you have 2FA activated but you ticked that box that asked you to never ask you again in 30 days for the same computer. Did you use a public computer? I don't tick that box that disables 2FA in 30 days. It beats the purpose of having 2FA security and again it's not a good idea to store your coins in an online wallet.

[mr_stark]

My coinbase got hacked today. I got a message on my phone saying that my password had changed. I attempted to follow instructions to stop it, but by the time I had, it was too late and the theif emptied out my hot wallet. The only saving grace was that coinbase has vaults which give 48 hour delay. I wish that I would have transferred more coins to the vault as they were protected. Coinbase has some serious vulnerabilities, but whoever the thief was was able to login from my IP and was able to login to my email despite the fact that I had just changed my password. Be careful out there. Cold wallet your coins.

It's never a good idea to store coins on exchange. However I doubt Coinbase has serious vulnerabilities. What happened is that you most likely got infected with a RAT. Its not a problem for the hacker to log in with your IP and your email really. Ways to prevent this is usage of 2FA

I do use 2FA. I need google authenticator every login. I wish it would have been SMS. I'm not sure how this happened. I just wish I would have kept more of them in a vault, or sold my hot wallet contents earlier.

I don't think it is possible to bypass 2FA or crack it. You should keep all the funds in vault and if keeping on exchange secure it by 2FA on login and withdrawal.

[bob123]

SMS 2FA is more vulnerable to spoofing than Google Authenticator.
But despite of any vulnerabilities.. you should never store coins longer than necessary on an exchange.
You should definetly run a full malware scan.
Do you have any clue how this happened? Did you already scan your pc for malware?
Did you logon from mobile phones? Or via hotspot? Did you always check you are on the official site? Also checked TLS encryption (https)?
If you have different passwords for coinbase and your email account and you never reused a password twice the chances that
you are infected with a trojan is very very high. In this case clean your PC, get a fresh OS and only then start storing
bitcoins (or login credentials to exchanges) on your pc again.

[Jonsnowstark]

My coinbase got hacked today. I got a message on my phone saying that my password had changed. I attempted to follow instructions to stop it, but by the time I had, it was too late and the theif emptied out my hot wallet. The only saving grace was that coinbase has vaults which give 48 hour delay. I wish that I would have transferred more coins to the vault as they were protected. Coinbase has some serious vulnerabilities, but whoever the thief was was able to login from my IP and was able to login to my email despite the fact that I had just changed my password. Be careful out there. Cold wallet your coins.

This is sad. I don't think coinbase is vulnerable though. Just a note, never keep your coins in an exchange site for too long. Secure your wallet address in a place where it cannot be easily stolen. I do 2fa for my accounts in exchange sites too and i never have problems with it. That's the best way to feel secure about my investments.

[amila_cs]

My coinbase got hacked today. I got a message on my phone saying that my password had changed. I attempted to follow instructions to stop it, but by the time I had, it was too late and the theif emptied out my hot wallet. The only saving grace was that coinbase has vaults which give 48 hour delay. I wish that I would have transferred more coins to the vault as they were protected. Coinbase has some serious vulnerabilities, but whoever the thief was was able to login from my IP and was able to login to my email despite the fact that I had just changed my password. Be careful out there. Cold wallet your coins.

It's never a good idea to store coins on exchange. However I doubt Coinbase has serious vulnerabilities. What happened is that you most likely got infected with a RAT. Its not a problem for the hacker to log in with your IP and your email really. Ways to prevent this is usage of 2FA

Everybody I know is saying not to store coins in Exchanges. But when you are into day trading, how do you manage that. Having coins in the exchange is pretty much easy to buy/sell in sudden market movements

[farhaan]

That's why it is always said not to store your bitcoins in exchange ever.We are already familiar wit Mt.Gox collapse.But even now,some newbies don't know about the seriousness of storing bitcoins in exchanges.

Always store in desktop wallets like Electrum which are safe and secure.

[Baofeng]

My coinbase got hacked today. I got a message on my phone saying that my password had changed. I attempted to follow instructions to stop it, but by the time I had, it was too late and the theif emptied out my hot wallet. The only saving grace was that coinbase has vaults which give 48 hour delay. I wish that I would have transferred more coins to the vault as they were protected. Coinbase has some serious vulnerabilities, but whoever the thief was was able to login from my IP and was able to login to my email despite the fact that I had just changed my password. Be careful out there. Cold wallet your coins.

It's never a good idea to store coins on exchange. However I doubt Coinbase has serious vulnerabilities. What happened is that you most likely got infected with a RAT. Its not a problem for the hacker to log in with your IP and your email really. Ways to prevent this is usage of 2FA

Everybody I know is saying not to store coins in Exchanges. But when you are into day trading, how do you manage that. Having coins in the exchange is pretty much easy to buy/sell in sudden market movements

Oh well, hackers strikes again and I'm sorry for you lost. I think they found vulnerabilities in you. Vault is a good practice as well as Google Authenticator. We preached not to put a lot of bitcoin in a exchange because of the chances of a hack, so I also hope that what they took from you is just a small amount of bitcoins, used only for your day trading. I familiar with RAT virus or malware though, will try to research later so that I can prevent myself for being hack as well.

[Hexah]

It is not really recommended to keep your coins to an exchange because it's prone to hacking activities andany frauds, so, if you want to keep your coins store it on hardware wallets or if you don't have that one maybe you can use cold wallets for long term or hot wallets if you used your coins everyday. Online web wallets are not good wallets to keep your coins because it isn't a private one though, so better move to keep it on a cold, hardware and paper wallets for better security.

[Priktrice]

was able to login from my IP and was able to login to my email despite the fact that I had just changed my password.

You most likely have a rat (remote administrator tool) on your computer allowing that very hacker to see everything you do and type,  and also to remote control your computer as well as using his computer to browse from your ip address.  My guess is that he grabbed your login for your email and used a reverse proxy to login and change your info and take your btc.  I would recommend checking your computer for malware and also checking your startup entries. If that doesn't get rid of the hacker,  then you probably should just reset and keep only what you need.

[rifiuti]

To OP and hodlers;

Get an USB
Install persistent ubuntu with Electrum
When you want to send some coins, reboot computer and plug USB and switch to Ubuntu
Don't connect the internet when USB is plugged
Broadcast the transaction
Reboot
Switch to Windows
Verify the transaction

I believe this would be the most secure way.

I'm sure this advice given thousand times but; If you can afford Bitcoin, you can afford a damn Trezor or Ledger Nano. Better safe than sorry.

[eagleman]

My coinbase got hacked today. I got a message on my phone saying that my password had changed. I attempted to follow instructions to stop it, but by the time I had, it was too late and the theif emptied out my hot wallet. The only saving grace was that coinbase has vaults which give 48 hour delay. I wish that I would have transferred more coins to the vault as they were protected. Coinbase has some serious vulnerabilities, but whoever the thief was was able to login from my IP and was able to login to my email despite the fact that I had just changed my password. Be careful out there. Cold wallet your coins.

That's why I'm not going to store most of my bitcoin on an exchange because there's no perfect exchange. I just can't understand on how did the hacker was able to log in with your IP, are you exposing your details online or you are sharing someone with your internet? Did you reached out the coinbase support and asked to help you with your problem? You should ask them to help you since it's also a fault to their system until finding out that it's your fault.

[Mahanton]

My coinbase got hacked today. I got a message on my phone saying that my password had changed. I attempted to follow instructions to stop it, but by the time I had, it was too late and the theif emptied out my hot wallet. The only saving grace was that coinbase has vaults which give 48 hour delay. I wish that I would have transferred more coins to the vault as they were protected. Coinbase has some serious vulnerabilities, but whoever the thief was was able to login from my IP and was able to login to my email despite the fact that I had just changed my password. Be careful out there. Cold wallet your coins.

It's never a good idea to store coins on exchange. However I doubt Coinbase has serious vulnerabilities. What happened is that you most likely got infected with a RAT. Its not a problem for the hacker to log in with your IP and your email really. Ways to prevent this is usage of 2FA

I do use 2FA. I need google authenticator every login. I wish it would have been SMS. I'm not sure how this happened. I just wish I would have kept more of them in a vault, or sold my hot wallet contents earlier.

Quiet odd that you didnt activate that sms verification. Ive been using coinbase and this security features ive been using which it do send codes into my mobile phone number  and then an email verification before you would able to log in completely.I suspect theres a RAT on your pc which the hacker did able to know all the credentials needed for accessing your account.

[Lucius]

Every day a new case of lost / stolen BTC from online,but also from desktop wallets tells us that people just do not stick to the most basic things when using computers and the internet.It does not matter do you keep BTC on online or desktop wallet if you let something bad to infects your PC,such is this RAT(remote access trojan).I agree that if you have a significant amount of coins hardware/paper wallet is something that simply must be used.

[bigboybitcoin]

My coinbase got hacked today. I got a message on my phone saying that my password had changed. I attempted to follow instructions to stop it, but by the time I had, it was too late and the theif emptied out my hot wallet. The only saving grace was that coinbase has vaults which give 48 hour delay. I wish that I would have transferred more coins to the vault as they were protected. Coinbase has some serious vulnerabilities, but whoever the thief was was able to login from my IP and was able to login to my email despite the fact that I had just changed my password. Be careful out there. Cold wallet your coins.

I think your 2fa was compromised some how.
Or if you have not enebled 2fa it was your fault.
Though i feel for your loss and pain .
In September i also lost 3000usd from poloniex even i have 2fa enabled there.

[JeffBrad12]

My coinbase got hacked today. I got a message on my phone saying that my password had changed. I attempted to follow instructions to stop it, but by the time I had, it was too late and the theif emptied out my hot wallet. The only saving grace was that coinbase has vaults which give 48 hour delay. I wish that I would have transferred more coins to the vault as they were protected. Coinbase has some serious vulnerabilities, but whoever the thief was was able to login from my IP and was able to login to my email despite the fact that I had just changed my password. Be careful out there. Cold wallet your coins.

I just know about the coinbase has 2fa verification and why you are no using it. The possible thing about you were getting phishing. If the hacker be able to login into your email and that will be the end of the story.
Or another speculation about your computer got infected by ransom ware. Remember to not to publicly your email address that has used to store all of your data.

[tj4dmx]

Basically,the hacking was possible by using a RAT !
Your security is already compromised !!

You need a fresh laptop or even maybe you can get a brand new laptop !!
Sorry bro.