Coinbase Exploit Hacker Swaps $5M DAI to USDC, Bridges Funds After 35-Minute Idle Window

ccn.comPublished on 2025-10-02Last updated on 2025-10-02

Key Takeaways

Coinbase threat actors behind the May breach have become active again, transferring $5 million DAI.
The hackers then swapped DAI to USDC using Circle’s CCTP bridge.
The stolen funds sat in a USDC address for over 35 minutes, but Circle’s compliance norms failed to freeze it.

After five months, the May Coinbase exploit hacker has swiped $5 million of DAI stablecoins for USDC using Circle’s CCTP bridge.

The incident is linked to a breach in which Coinbase users had been tricked into sending funds to attackers after they gained access to personal information.

At the time, Coinbase had estimated that the losses could mount to $400 million.

Try Our Recommended Crypto Exchanges

Bitget

promotions

Earn rewards worth up to 5,000 USDT on your first deposit

Coins

Claim Offer

Bitunix

promotions

Receive up to $100,000 worth of exclusive gifts for newcomers upon registration.

Coins

Claim Offer

Zoomex

promotions

Gain $5 Bonus in USDT when you meet the minimum total Derivatives trading volume of $30,000.

Coins

Claim Offer

ZachXBT Alerts Community

On-chain Seluth ZachXBT shared the incident in his Telegram group, which tracked the movement of funds on the blockchain after months of idleness.

The on-chain investigator said that the threat actor from the “Coinbase breach swapped ~5M DAI for ~5M USDC, which had been sitting as USDC for 35 minutes.”

Due to Circle’s compliance policies and slow response times in freezing suspicious addresses, the funds were successfully extracted via bridges, including Circle’s official Cross-Chain Transfer Protocol (CCTP).

ZachXBT called out Circle for being inactive and non-compliant

“Due to Circle not being compliant, the funds were just bridged away. A portion was bridged using the official Circle CCTP bridge.”

Circle’s policy allows blacklisting USDC addresses but requires manual review. The 35-minute idle was flagged in this case, but processing delays prevented a freeze. CCTP transfers are “validated” post-burn, so recovery is harder once they are minted at the destination.

Theat Actors and Social Engineering Technique

The May Coinbase breach was one of the largest in crypto exchange history. It exposed sensitive customer data for around 69,461 users and enabled social engineering attacks that led to direct thefts totaling $200–400 million.

Hackers bribed overseas customer support agents from Indian call centers like TaskUs to access internal Coinbase systems. These insiders stole data for <1% of monthly active users but targeted high-value accounts with 7–8 figure balances.

The threat actors managed to gain access to emails, phone numbers, the last four digits of SSNs, photo IDs, and physical addresses. This fueled phishing campaigns in which actors posed as Coinbase reps, tricking users into sending crypto.

The hackers behind the whole operation contacted Coinbase, demanding a $20 million bounty. However, the crypto exchange denied the ransom and converted it into a reward for anyone who could help them identify and recover funds.

Top Picks for Bitcoin

List of Most Popular Altcoins by Recent Hourly Searches Published!

Cryptocurrency data platform CoinGecko released a list of the most popular altcoins based on user searches over the last three hours. Pudgy Penguins ($PENGU) leads the trending list, followed by Catecoin (CATE) and Bless ($BLESS) in the top three. According to CoinGecko, $PENGU's price increased by 3.9% in the last 24 hours. CATE, ranked second, surged 126.2% over the same period, while $BLESS saw a 24-hour gain of 86.1%. What IF (IF) also stands out with a 41.9% daily increase. The list of most searched cryptocurrencies and their total market capitalization over the past three hours is as follows: 1. Pudgy Penguins ($PENGU) – $389.13 million 2. Catecoin (CATE) – $19.62 million 3. Bless ($BLESS) – $32.72 million 4. Aerodrome Finance (AERO) – $385.03 million 5. Hyperliquid (HYPE) – $11.43 billion 6. Ethereum (ETH) – $224.17 billion 7. Chainlink (LINK) – $6.17 billion 8. Aave (AAVE) – $1.42 billion 9. What IF (IF) – $31.24 million 10. Polkadot (DOT) – $1.34 billion 11. Bitcoin (BTC) – $1.27 trillion 12. Virtual Protocol (VIRTUAL) – $366.19 million 13. Algorand (ALGO) – $758.15 million 14. Cash Cat (CASHCAT) – $41.81 million 15. Solana (SOL) – $42.38 billion *This is not investment advice.

cryptonews.ru55m ago

List of Most Popular Altcoins by Recent Hourly Searches Published!

cryptonews.ru55m ago

For $100,000 a Month: Truth Social Sells Access to Trump's Posts to Investment Firms

In August 2026, Trump Media and Technology Group (TMTG) launched Truth API, a paid data service offering real-time access to posts from influential Truth Social accounts, including Donald Trump's, for institutional and algorithmic trading firms. Subscriptions reportedly cost up to $100,000 monthly, with discounts for long-term contracts. TMTG's CEO framed it as a strategy to monetize platform assets and create shareholder value. The move drew criticism from lawmakers, including Democrats Elizabeth Warren and Adam Schiff, who called for an SEC investigation, and Republican Bill Cassidy, who criticized the "sale" of privileged access. An AI analysis notes this creates a market risk architecture similar to past incidents where algorithms rapidly traded on unverified social media posts, raising questions about accountability for potential misinformation or manipulation.

cryptonews.ru1h ago

For $100,000 a Month: Truth Social Sells Access to Trump's Posts to Investment Firms

cryptonews.ru1h ago

Strategy leaves preferred STRC dividend at 12% as price still below par

Strategy's preferred STRC shares remain priced significantly below their $100 par value, closing July at $89.46 despite a monthly gain. The company confirmed its August dividend will hold at the recently increased 12% annual rate, paid semi-monthly. Management's stated objective is for the shares to trade at $99-$100, though no timeline was given. The firm reported a large Q2 net loss due to unrealized losses on its Bitcoin holdings but has built a $3.75 billion cash reserve to support preferred dividend payments for over two years. It has also begun repurchasing STRC shares while they trade below par.

cointelegraph2h ago

Strategy leaves preferred STRC dividend at 12% as price still below par

cointelegraph2h ago

Bitcoin Withdrawals Continue: 8 Years of Storage in a Coldcard Cold Wallet Ended in Zero

Coldcard Hardware Wallet Hacked: Losses Mount Due to Vulnerable Seed Generation A critical vulnerability in Coldcard hardware wallets has led to a continued wave of fund thefts. According to Galaxy Research, the total stolen has reached 1,367.05 BTC (approx. $88.6 million) from 4,585 addresses, a significant increase from the initial 594.5 BTC reported on July 30, 2026. Most of the stolen funds remain on the attackers' addresses. The issue is not with the current firmware, which Coinkite has updated, but with seed phrases generated on vulnerable devices between March 2021 and the release of fixed firmware versions. Due to a programmer error, devices switched from using a hardware random number generator to the software-based Yasmarang generator, which was initialized with publicly accessible data like the chip's serial number. This made the seed phrases predictable through offline brute-force attacks, meaning wallets remain at risk until funds are moved to a new wallet generated with the patched firmware. Affected devices include Mk2/Mk3 with firmware 4.0.1–4.1.9 (and up to 5.0.3), Mk4/Mk5 up to version 5.6.0, and Q models up to 1.5.0Q. The only exceptions are seeds created with a high-entropy method like at least 50 independent dice rolls or a strong unique BIP-39 passphrase. All other owners must generate a new seed on the fixed firmware and transfer their assets. A case highlighting the human impact involves a 39-year-old long-term investor who lost 2 BTC (approx. $130,000) in minutes. He had accumulated the Bitcoin over eight years through physical labor, viewing it as a financial lifeline and a retirement plan in a country suffering from hyperinflation. His story underscores that even conservative "buy and hold in cold storage" strategies can be compromised by such underlying technical flaws. From a technical perspective, this incident echoes historical failures where weak random number generators undermined cryptographic security, challenging the assumption that offline storage is automatically foolproof.

cryptonews.ru3h ago

Bitcoin Withdrawals Continue: 8 Years of Storage in a Coldcard Cold Wallet Ended in Zero

cryptonews.ru3h ago

Explosive Growth in Trading Volumes of 15 Altcoins Observed in South Korea!

Major South Korean cryptocurrency exchanges Upbit and Bithumb have reported a significant surge in trading volumes for several altcoins. Over the past 24 hours, the total trading volume for the most popular altcoins reached approximately $347.7 million. MetaDAO (META) led the rankings with a trading volume of $65.84 million on Upbit alone, accounting for 12.39% of the exchange's total spot volume. Euler (EUL) followed in second place with a total volume of $47.65 million across both exchanges. XRP, which consistently attracts substantial interest from Korean investors, achieved a total volume of $38.11 million. Other notable altcoins in the top 15 by trading volume include ThunderCore (TT) at $35.64 million, Babylon (BABY) at $25.15 million, and Shiba Inu (SHIB) at $10.55 million.

cryptonews.ru4h ago

Trading

Spot

Coinbase Exploit Hacker Swaps $5M DAI to USDC, Bridges Funds After 35-Minute Idle Window

Bitget

Bitunix

Zoomex

ZachXBT Alerts Community

Theat Actors and Social Engineering Technique

Related Reads

List of Most Popular Altcoins by Recent Hourly Searches Published!

For $100,000 a Month: Truth Social Sells Access to Trump's Posts to Investment Firms

Strategy leaves preferred STRC dividend at 12% as price still below par

Bitcoin Withdrawals Continue: 8 Years of Storage in a Coldcard Cold Wallet Ended in Zero

Explosive Growth in Trading Volumes of 15 Altcoins Observed in South Korea!

Trading

Hot Categories

Hot Tags