Live data from Hacker News

So, my Coinbase account was hacked, bitcoin stolen, now what?

news.ycombinator.com

1–10 of 61 posts

So, my Coinbase account was hacked, bitcoin stolen, now what?

#1
I check my email to find a message from Coinbase saying "You just sent 0.136 BTC to 12aW81234567890abcdefg..". I never initiated such a transaction. Obviously, I started freaking out a little bit. I log into my Coinbase account (which I felt had a strong password btw), to find my balance near zero. Just great. Thank goodness I hadn't linked a bank account in Coinbase yet, and that the stolen balance was less than $100, who knows what else may have been stolen. I filed a support ticket with Coinbase just hours after this occurred last night, but no response yet.

I'm distraught over this. A hacker can simply break into your account, steal your bitcoin by sending it off to his own account, and no one has to hold any type of accountability? Is there no way to trace, cancel, or reverse a transaction? Is there anything at all I can do?

Re: So, my Coinbase account was hacked, bitcoin stolen, now what?

#3
> and no one has to hold any type of accountability? Is there no way to trace, cancel, or reverse a transaction? Is there anything at all I can do?

You can file a police report. If somebody stole your physical cash, what would you do?

Bitcoin advocates claim this is a feature, not a bug. They say bitcoin should be the digital equivalent of cash.

Re: So, my Coinbase account was hacked, bitcoin stolen, now what?

#5
I don't know much about how Bitcoin works. But isn't one of the features of Bitcoin that you can make transfers super cheap? Wouldn't it be best to keep your Bitcoin "wallet" off any internet connected devices and then just make a transfer to Coinbase only when you need to sell Bitcoin to transfer back to your bank? I would think that it would be a bad idea to keep your Bitcoin stored anywhere except in a space you fully control and could keep safe. Though if you have malware on your computer which targets Bitcoin activity then I'm not sure there is much you could do.

Personally, I would probably get something like a Raspberry Pi (if it's beefy enough) with a Linux distro which runs straight from RAM just for Bitcoin transactions. So, every time you boot up, it's a totally new installation. You could make sure that your media that you are loading it from is ready only. Then enter your Bitcoin info, do your transaction and shut off the computer. Next time you boot it up, new installation again. With these distro's, you don't actually have to install Linux every time, they just run from a read only image typically. I use Puppy Linux.

This should do a lot to keep you safe from malware. Just using Linux makes you a little less of a target. Using a fresh install every time you boot up reduces your vulnerability window. I'm sure that if you are connected to the internet, anything could happen. If you use this method, you would probably need to be specifically targeted by someone who really knows what they are doing. There are easier targets out there. ;)

Re: So, my Coinbase account was hacked, bitcoin stolen, now what?

#6
post #2

They have two factor SMS verification available for every login attempt. But you may just have malware on your computer if you had a really strong password.

Sounds like there's some pretty nifty malware out there recently http://www.reddit.com/r/Bitcoin/comments/1sxcyr/coinbase_acc... https://bitcointalk.org/index.php?topic=355045.0

Perhaps something to do with the API (which is disabled by default but some victims have noticed was enabled) https://coinbase.com/docs/api/authentication "If someone obtains your api_key or an access_token with the send or all permission, they will be able to send all the bitcoin out of your account."

(edit: followed the transaction trail on one of those links, ended up with week old address that had received 49,497BTC https://blockchain.info/address/1Facb8QnikfPUoo8WVFnyai3e1Hc...)

Re: So, my Coinbase account was hacked, bitcoin stolen, now what?

#8
post #5

I don't know much about how Bitcoin works. But isn't one of the features of Bitcoin that you can make transfers super cheap? Wouldn't it be best to keep your Bitcoin "wallet" off any internet connected devices and then just make a transfer to Coinbase only when you need to sell Bitcoin to transfer back to your bank? I would think that it would be a bad idea to keep your Bitcoin stored anywhere except in a space you f…

>Personally, I would probably get something like a Raspberry Pi (if it's beefy enough) with a Linux distro which runs straight from RAM just for Bitcoin transactions.

This is basically exactly what you're talking about: http://piperwallet.com

Re: So, my Coinbase account was hacked, bitcoin stolen, now what?

#10
post #4

> A hacker can simply break into your account, steal your bitcoin by sending it off to his own account, and no one has to hold any type of accountability? I thought lack of regulation was one of the features of Bitcoin.

Why are you comparing Coinbase features with Bitcoin features?
Post reply on HN