Hack history / 2021 / Hack or exploit
Coinbase
Hack or exploit on Oct 1, 2021 · Session Key Compromised
SOURCES AGREE ON DATE AND LOSS · 2 SOURCES
Lost
undisclosed
dollars at the time
Returned
none listed
as the sources state it
Rank
not ranked
collapses, frauds and later news are not ranked
What happened
Attackers exploited a vulnerability in Coinbase's SMS-based account recovery process to bypass 2FA on 6,000+ customer accounts. Threat actors leveraged phishing campaigns to obtain email, password, and phone number combinations, then used the SMS recovery flaw to intercept 2FA tokens and drain accounts. Coinbase reimbursed affected customers.
Details
- Date
- Oct 1, 2021
- Kind
- Hack or exploit
- Method
- Session Key Compromised
- How in
- Keys, accounts and infrastructure
- Target
- Centralized exchange
- Chains
- not stated
After the theft
- Victims reimbursed
- yes, amount not stated
“Coinbase reimbursed affected customers.” (DefiLlama)
Reported by
Related incidents
Coinbase 2025 · Hack or exploit · $300K
New York scammer "daytwo" steals $4 million from Coinbase users, blows most of it gambling 2025 · Scam · $4M
Coinbase customer loses $35 million in bitcoin theft 2025 · Hack or exploit · $46M
Coinbase accused by crypto sleuth zachxbt of allowing more than $300 million per year in social engineering attacks on its customers 2025 · Hack or exploit · $300M
Crypto holder loses $100,000 to "Coinbase support" scammer, found via a Google ad 2024 · Scam · $100K
New York scammer "daytwo" steals $4 million from Coinbase users, blows most of it gambling 2025 · Scam · $4M
Coinbase customer loses $35 million in bitcoin theft 2025 · Hack or exploit · $46M
Coinbase accused by crypto sleuth zachxbt of allowing more than $300 million per year in social engineering attacks on its customers 2025 · Hack or exploit · $300M
Crypto holder loses $100,000 to "Coinbase support" scammer, found via a Google ad 2024 · Scam · $100K
Cite this page
SwanBluechip, "Coinbase hack, Oct 1, 2021: undisclosed lost", Crypto hack history, https://swan-hack-tracker.pages.dev/history/i/ht9e90122adb/ (data as of 2026-10-31).