Coinbase Accused of Losing $300 Million Annually to Scammers, Reputation at Stake

The crypto community might be safe and secure. However, there are still some chinks in the armor. In other words, even the biggest name in the game can have security lapses. One such giant is Coinbase itself.

Coinbase, one of the biggest names in the crypto industry, has recently come under fire from an independent analyst over its security measures. Zachxbt has accused the exchange of allowing scammers to siphon off millions of dollars from users’ accounts through social engineering tactics.

According to Zachxbt's analysis, these largely Indian scammers have been operating with the assistance of Coinbase's lax security measures, scamming users out of an estimated $300 million annually. Using screenshots and other materials, Zachxbt illustrated the impact of these scammers on Coinbase clients.

Highlighting the severity of the situation, Zach claims that scammers have managed to create replicas of the Coinbase website in an attempt to swindle users of their funds.

In the past two months alone, scammers are said to have siphoned off $65 million through a social engineering scam. Zach alleges that despite the alarming scale of these illicit activities, Coinbase has taken minimal action to curb them.

“Coinbase needs to urgently make changes as more and more users are being scammed for tens of millions every month,” Zachxbt stated. “The majority of the blame for this lies with leadership.”

Coinbase,隸屬FCA管轄，日前卻被一名獨立分析師指控，稱其安保措施形同虛設，導致詐騙犯得以輕易地從用戶帳戶中榨取數千萬美元資金。

具體來說，這些詐騙犯主要採用社會工程手段，用於獲取登錄詳情和其他憑證。而根據分析師 Zachxbt 的說法，大量詐騙犯來自印度，並在 Coinbase 薄弱安保措施的幫助下進行了長時間的詐騙活動。

Zach 甚至聲稱，在某個時間點，詐騙犯們還創建了 Coinbase 網站的副本，用於詐騙人們的資金。因此，詐騙活動的範圍十分廣泛，亟需採取及時措施予以應對。

在過去的兩個月中，據悉詐騙犯們通過一項社會工程詐騙活動榨取了 6500 萬美元資金。然而，更令人擔憂的是，Coinbase 幾乎沒有採取任何措施來遏制此類活動。

Zach 表示：「隨著越來越多用戶每個月被詐騙數千萬美元，Coinbase 需要緊急做出改變。」他進一步補充道：「大部分過錯都出在領導層身上。」

此類尖銳指控可能會損害 Coinbase 作為一個品牌的聲譽。

針對此事，Bitcoin.com 進行了跟進報導。在 Zach 提出上述指控後，監管機構敦促 Coinbase 對此事進行調查。隨後，Coinbase 通過一篇文章做出了回應，文中承認了這一點，並針對 Zach 提出的問題給出了解決方案。

Coinbase 在文章中表示：「社會工程攻擊導致了我們客戶遭受的大部分損失，而這個問題並非 Coinbase 所獨有。」該組織進一步補充道：「在過去的一年中，金融機構們遭遇的針對其客戶的社會工程攻擊增加了 10 倍。」

這篇文章確實提到了 Coinbase 用戶憑證被盜並在暗網中流通的說法，從而驗證了 Zach 的說法。然而，這篇文章並未否認或同意這 3 億美元的數字。不過，他們加入了來自 Chainalysis 的區塊鏈分析，以展示整個行業的 46 億美元損失。

Zach 的爆炸性說法可能被視為一名獨立分析師的抱怨，但實際上比這要深刻得多。這篇文章展示了任何人都可以輕鬆訪問機密數據並將其發布在公共論壇中。

因此，這確實引起了未來投資者的安全問題，從而使其成為了解和研究的一個有爭議的話題。最終，安全性的問題依舊存在。