Got hacked and robbed. My mistake for keeping coins on exchange

[bitjoin]

Not sure how it can be possible. Even sh*t exchanges like nova will send an email to your account asking you to confirm the withdrawal. Why is this not done on coinbase?

Kraken sends an email but its not a click to confirm withdraw one etc.  It just tells you withdraw is happening and to stop into you have o take action. What they do though is not allow any withdraw address to be added unless confirmed via email.  The OP is saying his email got hacked though so would not have saved him.

[marckenigsberg]

Sorry to hear about this, no matter how it happened, it hurts.
As said even with RAT your 2FA should have stopped the login.
Trading requires some coins to be on an exchange but you should only keep what you're actively trading.
If someone is concerned about the technical of using ubuntu etc then just get a trezor.
It's a great level of security that's easy to use

[nextel]

There are plenty of ways to secure wallets and keys. It's jist that you're too confident on storing your coins in exchange. After buying or selling, you better pull or widthraw everything.

[taxmanmt5]

Sorry to hear about this, no matter how it happened, it hurts.
As said even with RAT your 2FA should have stopped the login.
Trading requires some coins to be on an exchange but you should only keep what you're actively trading.
If someone is concerned about the technical of using ubuntu etc then just get a trezor.
It's a great level of security that's easy to use

I feel so sad. Its your shocking story. I know how you struggle hard to earn these bitcoin and at the end someone stole it. I think you learn something from it. You should not use the online wallet. Try to use hardware wallet instead of Software Wallets. Hardware wallets are bit expensive to maybe you should try Software you can download it from internet.

[reflector]

Sorry to hear about this, no matter how it happened, it hurts.
As said even with RAT your 2FA should have stopped the login.
Trading requires some coins to be on an exchange but you should only keep what you're actively trading.
If someone is concerned about the technical of using ubuntu etc then just get a trezor.
It's a great level of security that's easy to use

I feel so sad. Its your shocking story. I know how you struggle hard to earn these bitcoin and at the end someone stole it. I think you learn something from it. You should not use the online wallet. Try to use hardware wallet instead of Software Wallets. Hardware wallets are bit expensive to maybe you should try Software you can download it from internet.

That does not need dude. If you keep on checking your wallet and having the e-mail security with the two factor authentication means you can use the exchange or online wallet. Nothing will cause a problem to you.
Maximum you can have desktop wallet which is easy accessible and can use it any time and keep your private key and wallet seed from others.

[player514]

My coinbase got hacked today. I got a message on my phone saying that my password had changed. I attempted to follow instructions to stop it, but by the time I had, it was too late and the theif emptied out my hot wallet. The only saving grace was that coinbase has vaults which give 48 hour delay. I wish that I would have transferred more coins to the vault as they were protected. Coinbase has some serious vulnerabilities, but whoever the thief was was able to login from my IP and was able to login to my email despite the fact that I had just changed my password. Be careful out there. Cold wallet your coins.

It's never a good idea to store coins on exchange. However I doubt Coinbase has serious vulnerabilities. What happened is that you most likely got infected with a RAT. Its not a problem for the hacker to log in with your IP and your email really. Ways to prevent this is usage of 2FA

I second this idea. Sounds like a RAT attack to me. There's no way some random person can quickly know an IP and mask theirs as the slave IP. Chances are that the person sent you some adware or you stumbled on a bad file that gave path to someone's RAT. Be very careful with what you download on the internet nowadays. People will come at a few coins with whatever they have. Bitcoin offers no security to you even if you do get scammed or robbed.

[iamsange]

Okay this is some serious issue, and i am really sorry for your trouble. But even when you lose, you still can share this wonderful knowledge to all of us.
So, i learn some things.
1. Exchange is some website or smartphone app wallet
2. Hard wallet is like a usb device that store all your coin in it and it is safer because it has some extra protection.
3. Do not store bitcoin long enough in an exchange app

So for me, who does not have hard wallet, i guess it is better if every time i get bitcoin i will directly trade it to fiat currency? Or do you guys have any idea and experience on how to keep bitcoin safely without hard wallet? Please do tell us, share some knowledge.

if you not want to hold your coins maybe it is better to do that, i always sell my coins and left around 0.05-0.1 in my local exchanger wallet.the reason is same with everyone maybe. i afraid if get hacked

[nexus2k14]

My coinbase got hacked today. I got a message on my phone saying that my password had changed. I attempted to follow instructions to stop it, but by the time I had, it was too late and the theif emptied out my hot wallet. The only saving grace was that coinbase has vaults which give 48 hour delay. I wish that I would have transferred more coins to the vault as they were protected. Coinbase has some serious vulnerabilities, but whoever the thief was was able to login from my IP and was able to login to my email despite the fact that I had just changed my password. Be careful out there. Cold wallet your coins.

Sorry to hear bad news like this. I don't understand why you didn't enable 2-factor authentication? You should enable on any website that supports it for example (Amazon, NiceHash, LocalBitcoins, Gmail and all exchanges that support 2FA) Ebay don't have 2FA but if they do I will enable too.

Next time you will know, it's not safe to keep BTC or ETH or any other crypto on exchange, one day even most trusted exchange can be in troubles (like BTC-e)

We all make mistakes, and it doesn't matter if you the newbie or experienced user. I was in hurry and transferred eth to another exchange into other Token address, theoretically, I lost my Etereum but I contacted this exchange and after mentioning I will leave negative feedback on forum and Trust Review website I had another reply from Tech support that they will check for me and get them back, exchange fixed this for me, even they state Tokes send to wrong address are lost.

[iluvpie60]

My coinbase got hacked today. I got a message on my phone saying that my password had changed. I attempted to follow instructions to stop it, but by the time I had, it was too late and the theif emptied out my hot wallet. The only saving grace was that coinbase has vaults which give 48 hour delay. I wish that I would have transferred more coins to the vault as they were protected. Coinbase has some serious vulnerabilities, but whoever the thief was was able to login from my IP and was able to login to my email despite the fact that I had just changed my password. Be careful out there. Cold wallet your coins.

Are you able to file something with coinbase to let them know that you were hacked?

Is there any chance that you weren't really hacked but instead what happened was that someone you know or has access to your computer might have done this?

Does anyone else know your password to your PC and or phone??? Do you share a computer?

[finzyoj]

My coinbase got hacked today. I got a message on my phone saying that my password had changed. I attempted to follow instructions to stop it, but by the time I had, it was too late and the theif emptied out my hot wallet. The only saving grace was that coinbase has vaults which give 48 hour delay. I wish that I would have transferred more coins to the vault as they were protected. Coinbase has some serious vulnerabilities, but whoever the thief was was able to login from my IP and was able to login to my email despite the fact that I had just changed my password. Be careful out there. Cold wallet your coins.

Your lose gives lesson to everyone specially to those who are new in this. Everyone learns from mistakes. There are lot of theft and hacker around the globe and it is hard to find which security is good to use so they cannot enter in such way. It is better to not leave the money in any transaction site specially if it is big amount because it is hot in the eye on the theft.  

[Sadlife]

Most likely is that coinbase is not at fault here their security seems good so the only way for hackers to breach your account and access your email is some kind a remote access tool that infected your computer and got all your credentials then spoof your IP that's why he was able to hack the 2FA.

[grermezter]

My coinbase got hacked today. I got a message on my phone saying that my password had changed. I attempted to follow instructions to stop it, but by the time I had, it was too late and the theif emptied out my hot wallet. The only saving grace was that coinbase has vaults which give 48 hour delay. I wish that I would have transferred more coins to the vault as they were protected. Coinbase has some serious vulnerabilities, but whoever the thief was was able to login from my IP and was able to login to my email despite the fact that I had just changed my password. Be careful out there. Cold wallet your coins.

It's never a good idea to keep your money in exchanges especially when they are being hacked all the time. I thought you would have had more stringent security measures in place to prevent these kind of this like a 2FA security which makes it a bit harder for hackers to gain access into your account.

[drm]

Besides 2fa, lot's of exchanges disable withdrawal for 24 hours after changing credentials.

[DAVETUN]

My coinbase got hacked today. I got a message on my phone saying that my password had changed. I attempted to follow instructions to stop it, but by the time I had, it was too late and the theif emptied out my hot wallet. The only saving grace was that coinbase has vaults which give 48 hour delay. I wish that I would have transferred more coins to the vault as they were protected. Coinbase has some serious vulnerabilities, but whoever the thief was was able to login from my IP and was able to login to my email despite the fact that I had just changed my password. Be careful out there. Cold wallet your coins.

This is quite sad,scammers and hackers on the move daily,reason whu caution has to be the watch word, I do not respond to message that has to do with change of password
Coinbae need to strengthen there site against intruderd

[Sebas.tian]

Having coins on exchanges is like putting your money in a not-so-hard glass case--it barely has protection and can be destroyed anytime. I myself have learned this lesson the hard way and from then on, I don't care how paranoid people might think I am because in reality you'll wont think hacking is possible until it happens to you.

[Cryptoshaft]

To OP and hodlers;

Get an USB
Install persistent ubuntu with Electrum
When you want to send some coins, reboot computer and plug USB and switch to Ubuntu
Don't connect the internet when USB is plugged
Broadcast the transaction
Reboot
Switch to Windows
Verify the transaction

I believe this would be the most secure way.

I'm sure this advice given thousand times but; If you can afford Bitcoin, you can afford a damn Trezor or Ledger Nano. Better safe than sorry.

really much hassle but really really safe way.
i thought that 2FA is more than enough, but i can't think of where did the OP miss

[ruthbabe]

My coinbase got hacked today. I got a message on my phone saying that my password had changed. I attempted to follow instructions to stop it, but by the time I had, it was too late and the theif emptied out my hot wallet. The only saving grace was that coinbase has vaults which give 48 hour delay. I wish that I would have transferred more coins to the vault as they were protected. Coinbase has some serious vulnerabilities, but whoever the thief was was able to login from my IP and was able to login to my email despite the fact that I had just changed my password. Be careful out there. Cold wallet your coins.

If you have a lot of coins in coinbase that amounted to hundreds or thousands of dollars, I would suggest you buy TREZOR or Ledger Nano and transfer a big part your coins there.

[roshanface123]

I am sorry for your loss and also thanks for your information i am quit new to crypto currency trading i started trading some altcoins in different exchanges and keep them in exchanges by believing exchanges are safe now i am not keeping any of my holding in exchanges.

[Virtual miner]

My coinbase got hacked today. I got a message on my phone saying that my password had changed. I attempted to follow instructions to stop it, but by the time I had, it was too late and the theif emptied out my hot wallet. The only saving grace was that coinbase has vaults which give 48 hour delay. I wish that I would have transferred more coins to the vault as they were protected. Coinbase has some serious vulnerabilities, but whoever the thief was was able to login from my IP and was able to login to my email despite the fact that I had just changed my password. Be careful out there. Cold wallet your coins.

It's never a good idea to store coins on exchange. However I doubt Coinbase has serious vulnerabilities. What happened is that you most likely got infected with a RAT. Its not a problem for the hacker to log in with your IP and your email really. Ways to prevent this is usage of 2FA

I do use 2FA. I need google authenticator every login. I wish it would have been SMS. I'm not sure how this happened. I just wish I would have kept more of them in a vault, or sold my hot wallet contents earlier.

Yes quite astonished to see that people dont use 2FA. I have kept my exchange accounts safe with 2FA but I am not quite sure how is the new number patched every minute. I mean is there a unique number for my mobile's IMEI number or for my gmail account because if its for gmail account then its not much safe. Moreover I have always been against keeping your coins on exchange it isnt much surprising if coinbase themselves might have hacked your account.

[Rosberger]

I think coinbase is safe and that you are infected. Could it be that you were downloading things from the internet ? Always use more than 3 virus scanners for more safety.

Don't click on links that somebody just gave you. You need to check the url search it on google for example.