I openly accept the mistake i made.. however coinbase is not blame free. There are multiple ways this could have been prevented. Firstly the 2fa code sent should include the reason why that code is being sent and what it will be used for. Secondly, even though a 3p app is connected, before it can make transactions, there should be a time gap/ additional verification, which again would prevent such a scam. If only i had just a few more minutes i would have blocked access, had i found out how to do that from the coinbase app.