At least 6,000 Coinbase Users’ Accounts Have Been Emptied

As cryptocurrencies, which are recognized by more and more people, become so widespread, we see that attacks, frauds and thefts in this area are also increasing. As an example, the last pNetwork We’ve seen the site. From the website in question $12 million worth of Bitcoin had been stolen.

Now one of the world’s leading cryptocurrency exchanges coinbaseWe are faced with a similar situation. The site was not hacked, but users’ accounts, according to information Account recovery via SMS was seized due to a flaw in its method. As a result of this at least 6,000 of the person all cryptocurrencies disappeared. Coinbase shared a text on this subject.

A vulnerability was exploited in the account recovery system via SMS:

In the said text, Coinbase, third-party applications to access your account; your email, password, and phone number associated with your Coinbase account. he should know told. The platform, which states that it does not know how to access this information, generally by phishing He said that this information was obtained.

This is because users are malicious. not aware of means giving information to people. Saying in the rest of the text that there is no evidence that this information was received from Coinbase, the platform addressed a vulnerability in the SMS account recovery system. Coinbase announced that the third-party app was able to send it via SMS using a vulnerability here. two-step verification notification He said that he received it, therefore, that he had access to the accounts in this way.

After accessing the account, all that remains for the malicious is, transfer crypto assets to different accounts it happened.

Cryptocurrency values ​​at the time of the incident will be transferred to the accounts of the victims:

In the continuation of the text he shared, Coinbase, the SMS system, inaccessible He said he developed In addition, according to the accounts of 6,000 people affected by the event, the value of the cryptocurrencies at the time of the event. will be refundedHe also said that this will not take more than 1 day.

Apart from the stolen crypto assets, Coinbase, the attackers; He also stated that he saw people’s e-mail addresses, home addresses, dates of birth, names and IP addresses. platform, this information may have been changed He ended his text by stating: The legal process of the incident, which took place between March and May 20, is still ongoing.