GetChain News
中简 中繁 EN
GetChain News
Toggle sidebar

Security/Hacker

News linked to both this project and an event.

Galaxy Digital Commits $5 Million to Advance Bitcoin Quantum-Resistance Initiative

According to Decrypt, Galaxy Digital has officially launched the "Bitcoin Quantum Readiness Initiative," with three core pillars including: providing up to $5 million in post-quantum cryptography research grants to developers, publishing specialized research reports through Galaxy Research, and establishing a quantum advisory committee composed of scholars from multiple top universities. The initiative targets "Q-Day"—the critical moment when quantum computers utilize Shor's algorithm to crack Bitcoin's elliptic curve encryption, forge signatures, and steal wallet assets. Project Eleven predicts that quantum computers capable of cryptographic threats may emerge as early as 2030, at which point approximately 6.9 million BTC will face exposure risks. The Coinbase Quantum Advisory Committee has also called on developers to immediately initiate migration work. Meanwhile, Trump has signed an executive order setting the deadline for the U.S. federal government to complete post-quantum cryptography migration to December 2031.

BONK 财库攻击者再向 Coinbase 转入 4000 亿枚 BONK ,价值约 111 万美元

据链上分析师余烬监测,BONK 财库攻击者于 5 小时前再次向 Coinbase 转入 4000 亿枚 BONK ,价值约 111 万美元。

BONK Treasury Attacker Transfers Approximately $1.19 Million in Tokens to Coinbase

According to EmberCN monitoring, the address that previously drained the BONK treasury via a governance attack transferred another 400 billion BONK (approximately $1.19 million) to Coinbase 20 minutes ago. This address spent approximately $4.4 million 10 days ago to purchase sufficient BONK tokens to reach the governance voting approval threshold, subsequently initiated a governance proposal and forced it through, transferring 4.426 trillion BONK valued at approximately $21.2 million from the BONK treasury.

BONK Governance Attacker Transfers Another 400 Billion BONK to Coinbase, Cumulative CEX Inflows Reach 1.626 Trillion

According to monitoring by Yu Jin, the address that previously transferred BONK worth $21.2 million from the Bonk treasury through a governance proposal, after moving 1.186 trillion BONK (approximately $4.11 million) to Binance yesterday, has today transferred another 400 billion BONK (worth about $1.28 million) to Coinbase.Data shows that of the 4.426 trillion BONK removed from the Bonk treasury via the governance proposal by this address, 1.626 trillion BONK (approximately $5.58 million) have been moved to centralized exchanges. Additionally, in the 11 days since the address began withdrawing assets from the Bonk treasury, the price of BONK has fallen by approximately 36%, dropping from $0.0000047 to $0.000003.

Coinbase: Over 95% of Code Now Written or Assisted by AI, AI Agent Workload Equivalent to 1,200 Employees

Rob Witoff, Platform Leader at Coinbase, stated that currently, over 95% of the company's code is written or completed with the assistance of AI, a significant increase from the 40% figure announced in February this year. In an interview with Cointelegraph, Coinbase Platform Leader Rob Witoff said: "In fact, 100% of Coinbase employees use AI every day." Witoff noted that most Coinbase engineers currently run 5 to 10 AI Agents simultaneously. The combined work capability of these AI Agents is equivalent to approximately 1,200 employees.He predicts that by 2030, Coinbase's AI Agents could handle a workload equivalent to 100,000 employees. However, he stated that key areas such as core cryptography will still require human involvement, with AI primarily used for code testing, vulnerability checking, and prototyping. (Cointelegraph)

US Government Transfers 296,700 USDT to Coinbase Prime

The U.S. government has just transferred seized funds related to the Bitfinex hack case, with 296,710 USDT moved to Coinbase Prime, possibly for OTC sale.

Two hackers today spent a total of 11.718 million DAI to purchase 6,454.7 ETH

: According to monitoring by on-chain analyst Yu Jin, the hacker (0x18B...E66) who stole funds from a Coinbase user spent 7.378 million DAI early this morning to buy 4,049.7 ETH at a price of $1,822. Meanwhile, the address (0xa13...628) that received ETH from Tornado Cash last November had previously transferred out 4,978 ETH and exchanged them for 16.294 million DAI at a price of $3,273. Today, two hours ago, this address spent 4.34 million DAI to repurchase 2,405 ETH at a price of $1,804.

São Paulo State Court Orders Coinbase to Refund Nearly $100,000 to User Affected by Self-Custody Wallet Theft

Odaily reports: A court in the state of São Paulo, Brazil, has ordered Coinbase to refund nearly $100,000 to a user who claimed funds deposited in their Coinbase Wallet disappeared in an unauthorized transaction. Coinbase argued that the private keys to the wallet were entirely under the user's control. However, it failed to prove that the transaction was initiated by the wallet holder or that adequate security measures were in place to prevent the incident. The court ruled based on relevant provisions of the Consumer Protection Code and ordered Coinbase to return the full amount plus statutory interest. (Bitcoin.com News).

DeFi asset management and risk analysis company Gauntlet secures $125 million financing from Japanese financial giant SBI Holdings

According to Fortune, DeFi asset management and risk analysis company Gauntlet completed a $125 million financing round, exclusively invested by Japanese financial group SBI Holdings. The financing was completed in June this year, and the specific valuation was not disclosed. This is Gauntlet's largest financing round since its establishment in 2018, far exceeding its $24 million Series B round in 2022 led by Ribbit Capital at a $1 billion valuation. Gauntlet was founded by former Wall Street quantitative trader Tarun Chitra. It initially focused on providing stress testing and vulnerability analysis services for DeFi protocols. Later, as the DAO governance model waned, it gradually transitioned to a "treasury curation" business—assessing yield strategy risks through quantitative analysis to help institutional investors manage digital asset allocation. Currently, its clients include asset management giant Apollo, Coinbase, and stablecoin issuer Circle.

Base Discloses Causes of Two Recent Outages, Identified as Sequencer Vulnerabilities

the Coinbase Layer 2 network Base experienced two block production outages last week, with the root cause identified as a vulnerability in the sequencer's block construction logic. This vulnerability allowed outdated log states to persist after transaction validation failed, preventing the sequencer and validator nodes from processing invalid blocks until sequencing was restored.The first incident lasted 116 minutes, while the second, caused by a race condition following a system reset that prevented the sequencer from keeping up, lasted 20 minutes. The team has since fixed the issue by applying a patch to the sequencer, with future plans to improve protocol fuzz testing and build a graceful recovery mechanism. (Cointelegraph)

Coinbase assists Brooklyn District Attorney in combating impersonation scam, involving approximately $16 million

Coinbase officially stated it is cooperating with the Brooklyn District Attorney's Office in New York to assist in investigating a long-term impersonation scam targeting platform users and supporting victims in recovering funds.According to the Brooklyn District Attorney's Office, a Brooklyn man has been charged with long-term impersonation of Coinbase customer service. Using social engineering tactics, he tricked users into believing their accounts had been compromised and instructed them to transfer funds to a "secure wallet," subsequently moving and stealing the funds. The case involves approximately 100 victims, with the total amount involved nearing $16 million. Over $600,000 has been recovered so far.Coinbase stated that this type of scam does not stem from platform security vulnerabilities but is a social engineering attack exploiting user trust and a sense of urgency. Common methods include identity forgery, impersonating customer service, and creating panic over account risks. The company stated it has cooperated with law enforcement agencies to complete various investigative tasks, including identifying suspects, assisting with victim notifications, providing data support for legal requests, and conducting on-chain fund tracing. It emphasized that blockchain traceability helps law enforcement track the flow of funds.Coinbase also reminded users that the platform will never ask them to transfer funds to a "secure wallet" or request 2FA codes, seed phrases, or password reset links. It recommends that users only contact customer service through official in-app channels. The company will continue to strengthen its anti-fraud mechanisms, user education, and cooperation with law enforcement agencies to address increasingly sophisticated crypto asset fraud activities.

Coinbase Advisory Board Warns of Bitcoin’s Quantum Risk: No Consensus Yet Within the Community—Quantum-Resistant Migration Preparations Should Begin Immediately

A cryptography expert advisory committee led by Coinbase released a report stating that Bitcoin should immediately begin preparing for potential quantum computing attacks. However, the committee did not take a clear stance on whether to freeze the millions of bitcoins potentially vulnerable to quantum-computing theft in the future. The committee includes several leading experts, such as Justin Drake, a researcher at the Ethereum Foundation. They argue that the current debate is not about *how* to introduce quantum-resistant signature schemes, but rather *how to handle* bitcoins held in long-dormant addresses that fail to migrate. One camp advocates setting a final deadline after which Bitcoin’s existing ECDSA and Schnorr signature schemes would no longer be supported, and unmigrated funds would be frozen—thereby preventing future quantum attackers from seizing large amounts of BTC and destabilizing markets. The other camp contends that freezing funds would effectively amount to asset confiscation, violating Bitcoin’s core principles of immutability and full user control over assets—and could set a precedent for future regulatory-driven freezes. The Coinbase advisory committee notes that these approaches are not mutually exclusive and could be combined. Yet it declines to state a position on whether “legacy BTC” should be frozen, asserting that the ultimate decision rests with Bitcoin’s community governance. It emphasizes two key points: first, technical development of quantum-resistant signature migration must begin immediately—not wait for governance debates to conclude; second, users must receive clear, timely risk communication to prevent prolonged uncertainty from harming the Bitcoin ecosystem.

Five people in the UK sentenced for “wrench attacks” against cryptocurrency holders, victims forced to transfer crypto assets

UK police announced that five individuals have been sentenced in a “wrench attack” case targeting cryptocurrency holders. The suspects met the victim at a Shoreditch pub in London in July 2025 and forcibly took him to his home, where they used violence and threats—including coercing facial recognition verification—to compel him to access his bank and cryptocurrency accounts, stealing over £10,000 in cash, cryptocurrency, and watches. During the investigation, cryptocurrency exchange Coinbase reported suspicious activity on the victim’s account to the police, who subsequently identified and arrested the suspects. The court sentenced four principal offenders to prison terms ranging from three-and-a-half to six-and-a-half years, while a fifth individual received a community service order for money laundering. Police stated that the incident inflicted long-term psychological trauma on the victim and his family, highlighting the rising risk of offline violent crime targeting cryptocurrency asset holders.

A whale suffered an alleged personal intimidation attack, resulting in losses of $6.7 million

according to monitoring by Specter Analyst, a high-net-worth investor holding significant assets on Kraken and Coinbase exchanges fell victim to an alleged personal intimidation attack, resulting in total losses of approximately $6.7 million across various assets.The attacker withdrew 1,554 ETH (approximately $3.3 million) and 10.5 BTC from the user's Kraken account. Simultaneously, the attacker also breached the user's Coinbase defenses, withdrawing 34.1 cbBTC. Subsequently, the attacker directly deposited over $5.3 million of the stolen funds into the privacy protocol Tornado Cash to obfuscate the transaction trail. (financefeeds)

Coinbase internal tool Mux reveals AI coding paradigm shift: Engineers transition from "code writers" to "multi-agent orchestrators"

Coinbase, a cryptocurrency trading platform, has disclosed in a technical sharing session that its internal multi-agent development tool "Mux" is reshaping software engineering workflows, transitioning the engineer's role from traditional code implementers to task orchestrators for AI agents.With the widespread internal adoption of AI programming tools such as Cursor, Copilot, OpenCode, and Claude Code, code generation efficiency has significantly improved. However, development workflows have long remained stuck in a traditional "single-task, single-branch, sequential execution" mode, creating a new collaboration bottleneck.Mux was born as an internal tool against this backdrop. By assigning each AI agent an independent git worktree, branch, and terminal environment, the system enables parallel multi-task development and conflict-free collaboration, allowing engineers to simultaneously direct multiple agents to handle tasks such as API development, test writing, vulnerability fixes, and code refactoring.Data shows that as of April 2026, Mux has covered over 600 users within Coinbase (including engineers, product managers, and designers), with 335 actively using it and 197 being high-frequency users. It has facilitated over 5,000 PR merges across 461 code repositories and 10 organizations. Engineers using Mux achieved an average of 39.6 PR merges, approximately 3.5 times the baseline of 11.4.Coinbase stated that Mux's success relies on its internal infrastructure capabilities, including an LLM Gateway, secure model access, and a code flow deployment system, enabling deep integration of multi-agent tools into real development workflows. This trend marks a structural shift in the software engineering paradigm: as AI reduces the cost of code generation, the core value of engineers is transitioning from "implementation capability" to "problem definition and agent orchestration capability."

The American Bankers Association calls for tightening stablecoin reward restrictions; the Senate committee will vote on crypto legislation Thursday

According to The Block, Rob Nichols, CEO of the American Bankers Association (ABA), sent a letter to senior bank executives on Sunday evening urging them to contact U.S. Senators and call for further tightening of provisions related to stablecoin rewards ahead of the Senate Banking Committee’s markup vote scheduled for Thursday. Nichols warned that the current draft fails to effectively prevent crypto firms from offering users “interest-like rewards,” which could trigger massive outflows of bank deposits and threaten economic growth and financial stability. The current draft was negotiated by Senators Angela Alsobrooks and Thom Tillis. It prohibits paying users interest or returns for holding stablecoins but permits rewards tied to genuine activity or transactions—a provision supported by Coinbase. Banking industry groups contend that these exceptions contain loopholes that could be circumvented, and on May 8, they jointly wrote to Committee Chairman Tim Scott and Democrat Elizabeth Warren, requesting technical revisions to the language of the provision.

Coinbase Sued for Freezing Funds Linked to $55 Million DAI Theft

According to Cointelegraph, Coinbase has been sued in a U.S. federal court in California over frozen funds linked to a $55 million DAI phishing theft that occurred in 2024. The plaintiffs allege that some traceable stolen funds—after being mixed via Tornado Cash—were deposited into Coinbase retail user accounts and remain frozen. Coinbase states it can only release the assets after a court rules on their ownership. The complaint also links the theft to the malicious wallet drainer platform Inferno Drainer. Victims had engaged Zero Shadow and Five Stones Intelligence to track the stolen funds.

Crypto Whale Sues Coinbase for Refusing to Return $55 Million in Stolen Funds

According to Decrypt, an anonymous cryptocurrency whale filed a lawsuit against Coinbase this week in the U.S. District Court for the Northern District of California, accusing the exchange of refusing to return over $55 million worth of DAI stablecoins stolen in a phishing attack in 2024. The plaintiff claims to have engaged multiple on-chain investigation firms to trace the funds, ultimately identifying that the stolen assets flowed into a Coinbase account. Coinbase confirmed in December 2024 that it had frozen the relevant assets but refused to return them, citing the need for a court order. As of today—more than a year and a half after the incident—the victim has still not recovered the assets and has therefore turned to litigation. The attack was carried out by hackers using the “Inferno Drainer” tool to spoof the DeFi Saver login page; after the victim inadvertently interacted with the fake page, their wallet was fully compromised by the attackers.

California Man Sentenced to 70 Months in Federal Prison for Money Laundering for “Crypto Kids” Criminal Organization

According to the LA Times, Evan Tangeman, a 22-year-old resident of California, was sentenced to 70 months in federal prison followed by three years of supervised release for laundering at least $3.5 million for the “Crypto Kids” criminal organization. The group carried out social engineering scams by impersonating employees of cryptocurrency exchanges such as Coinbase and Gemini, stealing over $263 million worth of digital assets. The illicit proceeds were used to purchase luxury vehicles, lease high-end residences, and fund extravagant spending. In addition to handling money laundering, Tangeman assisted group members in leasing luxury homes and instructed co-defendants to destroy digital devices after other members were arrested. Federal agents seized a Rolls-Royce Ghost and a Porsche GT3 RS from his residence.

The U.S. government transferred Bitcoin worth $606,470 to Coinbase Prime.

Arkham monitoring shows that a U.S. government address has just transferred $606,470 worth of Bitcoin to Coinbase Prime. This Bitcoin was previously seized by the U.S. government from Ilya Lichtenstein, the Bitfinex hacker. It remains unclear whether this batch of stolen Bitcoin will be sold on Coinbase.