Coinbase Turns Tables on Would-Be Extortionists, Offers $20M Bounty for Information

By: decrypt|2025/05/15 21:15:05

Coinbase Turns Tables on Would-Be Extortionists, Offers $20M Bounty for Information The attackers sent a ransom note demanding $20 million in Bitcoin, threatening to publish stolen customer data if Coinbase didn’t pay. Decrypt’s Art, Fashion, and Entertainment Hub. Cybercriminals tried to blackmail Coinbase into paying $20 million in Bitcoin over stolen customer data. Instead of paying up, the crypto exchange is offering the same amount as a bounty to help bring the perpetrators to justice. The crypto exchange revealed how rogue overseas support agents were bribed by the criminals to leak sensitive user data, including names, addresses, masked bank details, and ID documents, in a blog post published Thursday. Cyber criminals bribed and recruited rogue overseas support agents to pull personal data on <1% of Coinbase MTUs. No passwords, private keys, or funds were exposed. Prime accounts are untouched. We will reimburse impacted customers. More here: https://t.co/SidVn59JCV — Coinbase ️ (@coinbase) May 15, 2025 While no funds, passwords, or private keys were compromised, and Coinbase Prime accounts remained "untouched," the attackers used the data to launch targeted social engineering scams on customers. “They then tried to extort Coinbase for $20 million to cover this up. We said no,” the company wrote in their statement. A video statement from CEO Brian Armstrong was cited by Coinbase in lieu of a direct response to Decrypt , in which he declared, “We are not going to pay your ransom.” In a move mirroring the plot of the 1996 film "Ransom," Armstrong added that he had, “a few next steps in mind... We’re putting out a $20 million award for any information leading to the arrest and conviction of these attackers,” the CEO said. https://t.co/evpIBMFvRW pic.twitter.com/f6UPdkL5R0 — Brian Armstrong (@brian_armstrong) May 15, 2025 The counter-move marks a shift in how crypto firms are responding to criminal threats. While companies typically offer bounties to encourage hackers to return stolen assets, Coinbase is using the reward to go on the offensive against cybercriminals. “This is a huge problem in the industry, and it’s only getting worse,” said Philip Martin, Coinbase’s Chief Security Officer, in an interview with Fortune . He confirmed the compromised support agents were based in India and have all been terminated. “Hell no!” Martin added how the ransom demand came with a threat to publish the stolen data unless Coinbase paid. “The knee-jerk reaction of every single person who heard we were being extorted was ‘hell no!’” he said. Coinbase said it is working with law enforcement, has tagged the attackers' wallet addresses, and will reimburse any customer who lost funds due to the social engineering attack. The company is also launching a new U.S.-based support hub and tightening access controls across its systems. “We will prosecute you and bring you to justice,” Armstrong said in his closing message to the attackers. “Now you have my answer.” Daily Debrief Newsletter

AI has become critical infrastructure, and governments and corporations are competing to control it. Centralized development and regulation are entrenching existing power structures. The Web3 community is building a decentralized alternative — distributed compute, token incentives, and community governance — before that window closes.

Vitalik wrote a proposal teaching you how to secretly use AI large models

Vitalik believes that in the AI era, users should not have to give up their identity to use an AI tool.

On the eve of the explosion of on-chain options

Options are becoming a new anchor in the cryptocurrency market.

WEEX AI Hackathon: How Did This AI Trading Winner Succeed?

A self-taught AI trading enthusiast achieved top-10 results at the WEEX AI Hackathon. Learn about the mindset, AI tools, and lessons behind this impressive performance.

One Balance to Rule Them All: Gravitas' On-Chain Prime Broker Ambition

Forty years ago, a technological revolution broke the isolation of information, reshaping Wall Street. Forty years later, Grvt aims to break the isolation of capital with an on-chain prime brokerage model.

That person who cashed out at the NFT peak is now selling a new shovel in the OpenClaw craze

A skilled person never picks the table, they eat meat with every bite.

Inter-generational Prisoner's Dilemma Resolution: The Nomadic Capital and Bitcoin's Inevitable Path

When the Baby Boomer generation collectively sells off, who will be the "bag holder" in the next asset crash?

Upstream and downstream are starting to fight, all for the sake of everyone being able to "Lobster"

「Lobster」 may not be a mature product yet, but it has already ushered in a new era of 「AI Assistants」.

Circle and Mastercard Announce Partnership, the Next Stage for the Crypto Industry Belongs to Payments

Stablecoins are transitioning from a speculative tool to real financial scenarios such as payments, cross-border transfers, and store of value.

From 5 Mao per kWh of Chinese electricity to a $45 API export: Tokens are rewriting currency units

When the same unit can both measure hashing power and facilitate payments, it ceases to be just a term and begins to evolve into a new currency of both value and influence.