Coinbase Exploit Hacker Swaps $5M DAI to USDC, Bridges Funds After 35-Minute Idle Window

ccn.com2025-10-02 tarihinde yayınlandı2025-10-02 tarihinde güncellendi

Key Takeaways

Coinbase threat actors behind the May breach have become active again, transferring $5 million DAI.
The hackers then swapped DAI to USDC using Circle’s CCTP bridge.
The stolen funds sat in a USDC address for over 35 minutes, but Circle’s compliance norms failed to freeze it.

After five months, the May Coinbase exploit hacker has swiped $5 million of DAI stablecoins for USDC using Circle’s CCTP bridge.

The incident is linked to a breach in which Coinbase users had been tricked into sending funds to attackers after they gained access to personal information.

At the time, Coinbase had estimated that the losses could mount to $400 million.

Try Our Recommended Crypto Exchanges

Bitget

promotions

Earn rewards worth up to 5,000 USDT on your first deposit

Coins

Claim Offer

Bitunix

promotions

Receive up to $100,000 worth of exclusive gifts for newcomers upon registration.

Coins

Claim Offer

Zoomex

promotions

Gain $5 Bonus in USDT when you meet the minimum total Derivatives trading volume of $30,000.

Coins

Claim Offer

ZachXBT Alerts Community

On-chain Seluth ZachXBT shared the incident in his Telegram group, which tracked the movement of funds on the blockchain after months of idleness.

The on-chain investigator said that the threat actor from the “Coinbase breach swapped ~5M DAI for ~5M USDC, which had been sitting as USDC for 35 minutes.”

Due to Circle’s compliance policies and slow response times in freezing suspicious addresses, the funds were successfully extracted via bridges, including Circle’s official Cross-Chain Transfer Protocol (CCTP).

ZachXBT called out Circle for being inactive and non-compliant

“Due to Circle not being compliant, the funds were just bridged away. A portion was bridged using the official Circle CCTP bridge.”

Circle’s policy allows blacklisting USDC addresses but requires manual review. The 35-minute idle was flagged in this case, but processing delays prevented a freeze. CCTP transfers are “validated” post-burn, so recovery is harder once they are minted at the destination.

Theat Actors and Social Engineering Technique

The May Coinbase breach was one of the largest in crypto exchange history. It exposed sensitive customer data for around 69,461 users and enabled social engineering attacks that led to direct thefts totaling $200–400 million.

Hackers bribed overseas customer support agents from Indian call centers like TaskUs to access internal Coinbase systems. These insiders stole data for <1% of monthly active users but targeted high-value accounts with 7–8 figure balances.

The threat actors managed to gain access to emails, phone numbers, the last four digits of SSNs, photo IDs, and physical addresses. This fueled phishing campaigns in which actors posed as Coinbase reps, tricking users into sending crypto.

The hackers behind the whole operation contacted Coinbase, demanding a $20 million bounty. However, the crypto exchange denied the ransom and converted it into a reward for anyone who could help them identify and recover funds.

Top Picks for Bitcoin

İlgili Okumalar

A 25% Weekly Surge: Bitcoin Breaches $79,000 Amid Mass Short Liquidations

Bitcoin surged above $79,000 on August 21, marking a 25% weekly gain. The rally was fueled by massive short liquidations exceeding $1.2 billion in 24 hours, catching many bearish traders off guard. Analysts are monitoring key levels. The $70,000 zone is seen as crucial for maintaining the bullish trend, while $73,000-$74,000 is a significant resistance area. Breaking and holding above this zone could pave the way for moves toward $83,000. Several traders, including Crypto Candy and Roman, noted the rapid achievement of earlier targets ($70,700 and $75,000) and acknowledge the possibility of a short-term pullback, but the overall structure remains bullish. Daan Crypto Trades emphasized the importance of Bitcoin closing the weekly candle above the 200-period Exponential Moving Average (EMA) around the $73k-$74k range for increased confidence in a move toward May's highs. From a data perspective, comparisons are drawn to similar short-squeeze events in the past, like August of the previous year and summer 2021, where sharp rallies preceded significant corrections. Some analysis suggests such derivative-driven spikes may not always reflect genuine spot market demand, raising the question of whether the momentum will sustain or if a retest of the $73,000-$74,000 support is imminent.

cryptonews.ru5 dk önce

A 25% Weekly Surge: Bitcoin Breaches $79,000 Amid Mass Short Liquidations

cryptonews.ru5 dk önce

Coinbase CEO Speculates Bitcoin Could Reach $400,000 Under Certain Condition

Coinbase CEO Brian Armstrong predicts that Bitcoin could reach between $300,000 and $400,000 within the next few years. He stated this would require a growth of approximately 317% to 456% from current levels, significantly increasing Bitcoin's market capitalization. Armstrong attributes Bitcoin's recent prolonged decline to the stalled progress of the U.S. digital asset regulation bill, CLARITY. He hopes for a bipartisan compromise when the Senate votes on September 15, securing the needed 60 votes for passage. Armstrong believes most banks now see CLARITY not as a threat but as a framework allowing fair competition with crypto companies, addressing earlier concerns that it might lead to mass withdrawals from savings accounts into stablecoins. His comments follow a recent White House meeting where former President Donald Trump urged Congress to pass CLARITY, attended by key crypto industry figures and regulators. Earlier this year, Armstrong also speculated Bitcoin could hit $1 million in four years due to increased institutional investment.

cryptonews.ru5 dk önce

Coinbase CEO Speculates Bitcoin Could Reach $400,000 Under Certain Condition

cryptonews.ru5 dk önce

Strategy's Reserve Turns a $1 Billion Profit Due to Bitcoin Price Increase

Strategy's bitcoin reserve, held by Michael Saylor's company, has moved into profit due to a surge in the cryptocurrency's price. The firm's unrealized gains now exceed $1 billion. On August 21, Bitcoin's price soared above $76,000 for the first time since late May, marking a 21% weekly increase. Strategy holds 840,447 BTC with an average purchase price of $75,385, representing a total investment of $63.36 billion since 2020. At a current price of approximately $76,700, the value of the reserve has reached $64.46 billion, exceeding its cost by about $1.1 billion. This marks a sharp turnaround from less than a month prior, when the company reported a Q2 loss of $8.2 billion, almost entirely driven by unrealized losses from bitcoin, which was valued around $60,000 at the end of June. To maintain financial stability, Strategy had resorted to selling some bitcoin and bolstering its US dollar reserves. However, CEO Fong Le stated in early August that the company plans to resume its bitcoin accumulation strategy later this year.

cryptonews.ru17 dk önce

Strategy's Reserve Turns a $1 Billion Profit Due to Bitcoin Price Increase

cryptonews.ru17 dk önce

Bitcoin price exceeds $77,000, marking a three-month record high

The price of Bitcoin (BTC) has surpassed $77,000, reaching its highest level since May 26. The leading cryptocurrency gained 8% in just 24 hours and 23% over the past week. The total market capitalization has risen to $2.58 trillion, with a 24-hour trading volume of $144 billion, according to Coinmarketcap data. Amid this rapid market surge, exchanges liquidated positions worth a total of $1.22 billion from 150,000 traders in a single day. Of this amount, $1.04 billion came from short positions. Experts previously interviewed by RBC-Crypto forecasted that if Bitcoin enters the $75,000–$78,000 range, it could pave the way for a move toward $80,000.

cryptonews.ru18 dk önce

Bitcoin price exceeds $77,000, marking a three-month record high

cryptonews.ru18 dk önce

RWA Tokenization Enters the Next Phase: What is the Truly Time-Consuming Advantage to Build?

The article argues that as tokenization frameworks for Real-World Assets (RWA) mature, the ability to issue assets is becoming less of a competitive advantage. The focus is shifting to what happens *after* issuance: which RWA operations can build enduring trust, maintain stable operations, and remain integrated into the financial ecosystem over the long term. The piece introduces the concept of a **Reserve Layer**—infrastructure that connects tokenized assets to the necessary verification, liquidity, and operational systems for on-chain finance. For an asset to serve as a reliable reserve (e.g., short-term U.S. Treasuries, gold), it needs predictable value, standardized features, deep markets, and observable pricing. However, the true, hard-to-replicate advantage lies not just in the underlying asset but in the **operational track record** built over time. This includes consistent reserve management, independent audits, successful redemptions, maintained liquidity, and protocol integrations. Each successful operation adds evidence, creating a reinforcing cycle: more evidence builds stronger institutional confidence, leading to wider distribution, deeper liquidity, and more use cases as collateral. The article presents a framework combining two dimensions: an asset's suitability as a reserve and the issuer's operational capability. The most sustainable model combines **high-quality reserve assets with strong, long-term operational discipline**. A critical blind spot is an asset with high reserve suitability (like gold) issued by an entity with a limited operational track record; the quality of the infrastructure is separate from the quality of the asset itself. In conclusion, the next phase of RWA will be defined by participants who can pair appropriate reserve assets with the operational rigor to support them through market cycles, thereby transforming tokenized RWAs into durable financial infrastructure.

marsbit22 dk önce

RWA Tokenization Enters the Next Phase: What is the Truly Time-Consuming Advantage to Build?

marsbit22 dk önce

İşlemler

Spot