Coinbase Exploit Hacker Swaps $5M DAI to USDC, Bridges Funds After 35-Minute Idle Window

ccn.comPublished on 2025-10-02Last updated on 2025-10-02

Key Takeaways
  • Coinbase threat actors behind the May breach have become active again, transferring $5 million DAI.
  • The hackers then swapped DAI to USDC using Circle’s CCTP bridge.
  • The stolen funds sat in a USDC address for over 35 minutes, but Circle’s compliance norms failed to freeze it.

After five months, the May Coinbase exploit hacker has swiped $5 million of DAI stablecoins for USDC using Circle’s CCTP bridge.

The incident is linked to a breach in which Coinbase users had been tricked into sending funds to attackers after they gained access to personal information.

At the time, Coinbase had estimated that the losses could mount to $400 million.

Try Our Recommended Crypto Exchanges
Sponsored
Disclosure
We sometimes use affiliate links in our content, when clicking on those we might receive a commission at no extra cost to you. By using this website you agree to our terms and conditions and privacy policy.
promotions
Earn rewards worth up to 5,000 USDT on your first deposit
Coins
Bitcoin Ethereum Tether Litecoin Bitcoin Cash 88
  • Bitcoin
  • Ethereum
  • Tether
  • Litecoin
  • Bitcoin Cash
  • TRON
  • Binance Coin
  • XRP
  • Cardano
  • Binance USD
  • USD Coin
  • Polkadot
  • Shiba Inu
  • Basic Attention Token
  • Qtum
  • Ethereum Classic
  • Chainlink
  • Solana
  • Polygon Matic
  • Cosmos
  • Wrapped Bitcoin
  • PancakeSwap
  • The Sandbox
  • Storj
  • iExec RLC
  • Bancor
  • Uniswap
  • Enjin Coin
  • 1inch Network
  • Chiliz
  • Aave
  • Synthetix
  • Maker
  • Compound
  • Theta Network
  • Celo
  • Curve DAO Token
  • Decentraland
  • JUST
  • Axie Infinity
  • Gala
  • Internet Computer
  • The Graph
  • Filecoin
  • dYdX
  • Mask Network
  • Lido DAO Token
  • Reserve Rights
  • Chromia
  • Ankr
  • Ocean Protocol
  • Adventure Gold
  • Origin Protocol
  • Celer Network
  • NKN
  • Bitget Token
  • Alchemix
  • Immutable
  • Ethereum Name Service
  • Avalanche
  • Zilliqa
  • JasmyCoin
  • Toncoin
  • Convex Finance
  • Spell Token
  • Holo
  • Render Token
  • SushiSwap
  • MetisDAO
  • Audius
  • Illuvium
  • ARPA Chain
  • Osmosis
  • Fantom
  • Neo
  • Arweave
  • Algorand
  • Kusama
  • XDC Network
  • APEcoin
  • MultiversX
  • THORChain
  • NEAR Protocol
  • Nexo
  • Amp
  • Livepeer
  • PAX Gold
  • TrueUSD
  • BitTorrent
  • Golem
  • FLUX
  • Helium
  • Dai
No result
promotions
Receive up to $100,000 worth of exclusive gifts for newcomers upon registration.
Coins
Bitcoin Ethereum Tether Binance Coin USD Coin 151
  • Bitcoin
  • Ethereum
  • Tether
  • Binance Coin
  • USD Coin
  • Solana
  • XRP
  • Dogecoin
  • Cardano
  • Toncoin
  • Shiba Inu
  • Avalanche
  • TRON
  • Chainlink
  • Polygon Matic
  • Polkadot
  • Wrapped Bitcoin
  • Litecoin
  • Dai
  • NEAR Protocol
  • Bitcoin Cash
  • Stellar
  • Cosmos
  • Filecoin
  • Ethereum Classic
  • Aptos
  • Hedera Hashgraph
  • Immutable
  • Optimism
  • Arbitrum
  • VeChain
  • The Sandbox
  • Decentraland
  • Axie Infinity
  • Injective Protocol
  • Render
  • The Graph
  • Maker
  • Aave
  • Chiliz
  • Helium
  • PAX Gold
  • Compound
  • Lido DAO Token
  • Sui
  • Conflux Network
  • Lido Staked ETH
  • OKB
  • Uniswap
  • Pepe
  • Ondo
  • Mantle
  • First Digital USD
  • XDC Network
  • Artificial Superintelligence Alliance
  • Jupiter
  • Quant
  • Worldcoin
  • Bonk
  • Tether Gold
  • JITO
  • JasmyCoin
  • Core
  • Floki Inu
  • Ethereum Name Service
  • SushiSwap
  • 1inch Network
  • Tezos
  • Algorand
  • Flow
  • Trust Wallet Token
  • Curve DAO Token
  • MultiversX
  • Basic Attention Token
  • Enjin Coin
  • Ethena
  • Ethena Staked USDe
  • Audius
  • Alchemy Pay
  • Arkham
  • API3
  • Bounce Token
  • Altlayer
  • Aergo
  • Amp
  • Aevo
  • Ankr
  • Axelar
  • Alpaca Finance
  • Blur
  • Biconomy
  • Tranchess
  • Celer Network
  • Shentu
  • Civic
  • Convex Finance
  • Cartesi
  • Cyber
  • COTI
  • DIA
  • dYdX
  • ether.fi
  • FLUX
  • Ampleforth
  • Golem
  • Holo
  • IoTeX
  • Illuvium
  • JUST
  • Livepeer
  • Memecoin
  • Manta Network
  • Treasure
  • Mask Network
  • Origin Protocol
  • ORDI
  • Ontology
  • Phala Network
  • Pendle
  • Portal
  • Pyth Network
  • ConstitutionDAO
  • iExec RLC
  • Reserve Rights
  • Ravencoin
  • Storj
  • Status
  • Spell Token
  • Sun (New)
  • SuperVerse
  • Tellor
  • LayerZero
  • Scroll
  • Usual
  • Eigenlayer
  • Hamster Kombat
  • Catizen
  • Berachain
  • KAITO
  • Pudgy Penguins
  • Solayer
  • Bio Protocol
  • ChainGPT
  • Cookie DAO
  • Solv Protocol
  • Movement
  • DeXe
  • Nexo
  • Hyperliquid
  • STEPN
  • Synthetix
  • Neo
  • APEcoin
  • Gala
  • Internet Computer
  • Pi Network
No result

ZachXBT Alerts Community

On-chain Seluth ZachXBT shared the incident in his Telegram group, which tracked the movement of funds on the blockchain after months of idleness.

The on-chain investigator said that the threat actor from the “Coinbase breach swapped ~5M DAI for ~5M USDC, which had been sitting as USDC for 35 minutes.”

Due to Circle’s compliance policies and slow response times in freezing suspicious addresses, the funds were successfully extracted via bridges, including Circle’s official Cross-Chain Transfer Protocol (CCTP).

ZachXBT called out Circle for being inactive and non-compliant

“Due to Circle not being compliant, the funds were just bridged away.  A portion was bridged using the official Circle CCTP bridge.”

Circle’s policy allows blacklisting USDC addresses but requires manual review. The 35-minute idle was flagged in this case, but processing delays prevented a freeze. CCTP transfers are “validated” post-burn, so recovery is harder once they are minted at the destination.

Theat Actors and Social Engineering Technique

The May Coinbase breach was one of the largest in crypto exchange history. It exposed sensitive customer data for around 69,461 users and enabled social engineering attacks that led to direct thefts totaling $200–400 million.

Hackers bribed overseas customer support agents from Indian call centers like TaskUs to access internal Coinbase systems. These insiders stole data for <1% of monthly active users but targeted high-value accounts with 7–8 figure balances.

The threat actors managed to gain access to emails, phone numbers, the last four digits of SSNs, photo IDs, and physical addresses. This fueled phishing campaigns in which actors posed as Coinbase reps, tricking users into sending crypto.

The hackers behind the whole operation contacted Coinbase, demanding a $20 million bounty. However, the crypto exchange denied the ransom and converted it into a reward for anyone who could help them identify and recover funds.

Related Reads

The Semiconductor Industry's Most Obscure Chokepoint Material: It Has Multiplied in Price Unnoticed, and China Just Banned Its Export

"Helium: The Silent Choke Point in Semiconductors" Helium, despite being the universe's second most abundant element, is critically scarce on Earth. It cannot be synthesized artificially and escapes Earth's gravity once released, making it a non-renewable resource. Yet, it is indispensable for advanced semiconductor manufacturing, requiring ultra-high purity (99.9999%) for processes like wafer etching, leak detection, and thermal management in lithography tools, with no viable substitutes. This low-profile resource, whose price has doubled unnoticed, suddenly gained attention when China imposed an export ban on July 10th. The ban is a response to a severe global shortage triggered months earlier. In March, missile attacks damaged the world's largest helium production hub in Qatar's Ras Laffan, halting a third of global supply with repairs expected to take 3-5 years. Concurrently, Russia tightened export controls, and the US sold off its federal helium reserve. Approximately 200 specialized transport containers, each worth ~$1 million, were stranded with perishable cargo. Global spot prices skyrocketed, and chipmakers like TSMC warned of potential impacts. China, which imports over 84% of its helium (primarily from Qatar and Russia), faces a severe squeeze. Despite being helium-poor, China has developed domestic extraction technology over five years, processing byproduct gases from LNG plants to produce ultra-pure helium. Domestic output, while still only covering less than 20% of demand, enabled the recent export ban aimed at securing domestic supply for its own expanding chip industry. The industry now faces "Helium Shortage 5.0." With key global sources constrained for years, this invisible gas—once wasted on party balloons—has become a critical, geopolitically charged bottleneck for chips, healthcare (MRI machines), and beyond, forcing the world to finally treat it as the finite strategic resource it is.

marsbit29m ago

The Semiconductor Industry's Most Obscure Chokepoint Material: It Has Multiplied in Price Unnoticed, and China Just Banned Its Export

marsbit29m ago

Early Investor of Unitree Bets on a Brain-Computer Interface Company

"Wabo Technologies, a brain-computer interface (BCI) startup, has secured new funding from Vertex Ventures (under Temasek), Hongtai Fund, Chengdu Future Industry Fund, and Huifengda Capital. Vertex Ventures is known for its early bet on Unitree Robotics. Inspired by the sci-fi film "Avatar," founder Zhang Xingzhi has pursued human-machine interaction for over a decade. He established Wabo in late 2025, coinciding with China's push for BCI as a future industry. Unlike companies focused solely on medical hardware, Wabo positions itself as a model company. Its core mission is to develop a "Human Neural Intent Model" that decodes EEG, EMG, and behavioral signals to understand a user's goals, confirmations, corrections, and stop intentions before physical action, translating them into standardized control signals for machines, robots, or smart devices. The young, full-stack team, backed by academic collaborators from Tianjin University and Fudan University, quickly attracted investors. The company had previously raised a seed round from Ceyuan Capital. Investors were impressed by Wabo's systematic capabilities in data collection, signal processing, and engineering, seeing potential beyond a single hardware product toward a reusable layer of human intent interpretation. Applications span medical rehabilitation, smart homes, embodied AI, and even space exploration, with Wabo partnering with Tianjin University on pioneering "space BCI" research. Wabo plans a dual-headquarters strategy, with Shanghai focusing on high-end R&D and model development, and Chengdu handling hardware, product development, and supply chain. The BCI sector in China is heating up, with over 30 financing deals in early 2026. Zhang believes future competition will center on who can build a sustainable data-model-scenario loop. He predicts industry consolidation within three years, with only companies that master this闭环 surviving. The vision from "Avatar" is inching closer to reality."

marsbit44m ago

Early Investor of Unitree Bets on a Brain-Computer Interface Company

marsbit44m ago

ChangXin Technology: A Cyclical Stock Standing Atop the Cycle Peak

Changxin Technology: A Cyclical Stock at the Peak On July 27, 2026, Changxin Technology topped the A-share market with a market capitalization of 3.28 trillion yuan, surging 465% on its first trading day. The company, which lost 16.3 billion yuan in 2023, reported an estimated net profit of 50-57 billion yuan for the first half of 2026. Its dramatic reversal mirrors the volatile DRAM (Dynamic Random Access Memory) cycle. The DRAM industry is inherently cyclical, with booms and busts every 3-4 years. This is due to product standardization and a significant time lag in supply adjustment. When prices rise, manufacturers expand capacity, but new production takes 2-3 years to come online, often leading to oversupply and price crashes when demand cools. Changxin's performance perfectly tracks this cycle. It recorded deep losses in 2023-2024 during the industry downturn, turned its first annual profit in 2025, and saw profits skyrocket in Q1 2026. This surge is primarily price-driven. The AI boom has led major players like Samsung and SK Hynix to shift 70-80% of new capacity to high-margin HBM (High Bandwidth Memory), creating a severe shortage and price explosion in general-purpose DRAM markets where Changxin competes. However, a massive global capacity expansion is underway. The top three manufacturers have announced nearly $70 billion in capital expenditure for 2026. Changxin itself plans to expand from three to seven 12-inch wafer fabs. This investment will translate into significant new supply in 2-3 years. While DRAM prices are expected to remain high through 2026-2027, price growth is already slowing, and a potential downturn is forecast for around 2028 as new capacity ramps up. A key challenge for Changxin is catching up in the critical HBM segment. While it has delivered HBM3 samples, leaders are already mass-producing more advanced HBM3E. Success in HBM is crucial for gaining true cyclical resilience. In conclusion, Changxin is a commendable company that has broken foreign monopolies in DRAM. Its long-term growth narrative—driven by import substitution and AI—is valid. Yet, its current valuation of 5-6x forward P/E, typical for a cyclical stock at its peak, suggests much future growth is already priced in. AI may extend the current cycle but cannot eliminate the industry's inherent volatility. For investors, the critical question is preparedness for the inevitable downturn when the cycle turns.

marsbit49m ago

ChangXin Technology: A Cyclical Stock Standing Atop the Cycle Peak

marsbit49m ago

Trading

Spot
活动图片