Drew alleges that for about one month Coinbase exposed account balances when a valid username and password were supplied without 2FA; Jack says this may be the flaw reported in connection with drained accounts.
“there was an exploit in Coinbase for about one month where you could check the balance of any valid password and username”
“Bleeping Computer ran an article back in October 2021 saying that 6,000 Coinbase customers had their crypto wallets drained due to a flaw in Coinbase’s 2FA system”