Vulnerability

Coinbase balance-disclosure flaw

vulnerability:coinbase_balance_disclosure_flaw Also: Coinbase 2FA flaw, Coinbase exploit

A flaw described as allowing account balances to be checked using valid credentials without completing 2FA.

Explore relationships

Mentioned in

• EP 112 Uncertain 98%

  A flaw described as allowing account balances to be checked using valid credentials without completing 2FA.

  “there was an exploit in Coinbase for about one month where you could check the balance”

Relationships

Claims

Coinbase balance-disclosure flaw AFFECTS Coinbase

Drew alleges that for about one month Coinbase exposed account balances when a valid username and password were supplied without 2FA; Jack says this may be the flaw reported in connection with drained accounts.

Uncertain Confidence 91% · Drew EP 112 Details

“there was an exploit in Coinbase for about one month where you could check the balance of any valid password and username”

“Bleeping Computer ran an article back in October 2021 saying that 6,000 Coinbase customers had their crypto wallets drained due to a flaw in Coinbase’s 2FA system”

Coinbase wallet-drain incident INVOLVES Coinbase balance-disclosure flaw

Jack believes the Coinbase wallet-drain reports may refer to the balance-disclosure/2FA flaw described by Drew.

Uncertain Confidence 86% · Jack Rhysider EP 112 Details

“I’m pretty sure it’s talking about this bug that Drew just said”