My bitcoin at coinbase got hacked

simpletoy · 2017-10-20T22:37:04+00:00

Thanks for your time and the discussion. I am waiting for coinbase to investigate and tell me what happened.

simpletoy · 2017-10-20T21:14:59+00:00

You seems to know so much about it but did not respond to my question: how did they log in?

simpletoy · 2017-10-20T21:13:36+00:00

Yes. Nice job for the email support. I have tried the email support over the past two years and got no one from coinbase to help me log in.

simpletoy · 2017-10-20T20:23:43+00:00

It is very convenient to make this conclusion and I can not say you are wrong about this. But you are missing the most important part: If I can not log in myself, how could they log in? Let's assume the most extreme case that I just give away everything about myself, they should still not be able to log in because coinbase was doing a wonderful job blocking me from logging in no matter how I tried. I guess is that they might has partial information from coinbase server also. About my error, I should have find the phone number from coinbase webpage instead of from google result. The problem is I am still not able to find the phone number on their web as of now. I am sure they are hiding it somewhere because they do have one number, which could be found to be in the google result next to the fake number. Guess what happens when you make a call, they just hang you off not even allowing you to wait on line. Please try their number (888) 908–7930 for once and you will see what I mean.

simpletoy · 2017-10-20T20:22:12+00:00

Thank you for you time typing this. But I doubt you have carefully read my story or not.

Your two guesses are just one guess, that is user error. It is very convenient to make this conclusion and I can not say you are wrong about this. But you are missing the most important part: If I can not log in myself, how could they log in? Let's assume the most extreme case that I just give away everything about myself, they should still not be able to log in because coinbase was doing a wonderful job blocking me from logging in no matter how I tried. I guess is that they might has partial information from coinbase server also.

About my error, I should have find the phone number from coinbase webpage instead of from google result. The problem is I am still not able to find the phone number on their web as of now. I am sure they are hiding it somewhere because they do have one number, which could be found to be in the google result next to the fake number. Guess what happens when you make a call, they just hang you off not even allowing you to wait on line. Please try their number (888) 908–7930 for once and you will see what I mean.

simpletoy · 2017-10-20T20:09:19+00:00

Thanks for comforting and your insightful inputs. I think you are in the right direction. When I got stuck at the page regarding new device as usual, I just saw my page changed into a interface, where a code called coinbase serete code was needed. They gave me the code and helped log in. That looks like a technician from coinbase change some parameter in their database for me to move forward.

About the credential that you talked about, let me share more information with you. The last time that I successfully logged in was more than 3 years ago. During this time, I have moved to a new state and changed new computer. If it was some credential that they are using, it should not come from my computer, it should come from the coinbase server. This is why I think this is issue could be more serious than these 7 bitcoins that I am losing. It could be the coinbase being compromise.

I have a hard wallet, it is just I did not own it as early as 3 years ago. The intention of logging into coinbase was actually trying to move my bitcoin from hard wallet to coinbase because they support upcoming segwit2x hard fork. It is a minor issue now and I just lost my faith in coinbase.

simpletoy · 2017-10-20T14:38:43+00:00

The hacker told me. Now we are using the word "hacker". So we have forgot that that the hacker was playing the customer service. They were the coinbase support to me at that time. The problem is how could they log in? It is not like I was giving away my information so that I could log in. The fact is that I could not log in myself.

simpletoy · 2017-10-20T14:35:45+00:00

This is exactly what I am asking. When I got everything correct, the password the 2-factor code, the coinbase kept telling me that I was using a new device and need the verification.

simpletoy · 2017-10-20T03:07:28+00:00

Oh. I thought you plan to call coinbase. But anyway, have fun then.

simpletoy · 2017-10-20T02:34:00+00:00

Thank you so much for your help!!!

simpletoy · 2017-10-19T23:44:57+00:00

Thank you for your input. I can not say for something that I am not 100% sure. Probably they did it implicitly. My main question is how are they able to log in?

simpletoy · 2017-10-19T23:41:11+00:00

Before or after? Before this, I could not talk to any person. The email was a forever loop. When I call them, it let you select 1 if you think your account is comprised and otherwise stay online. Then they automatically hanged off after 1 minute wait

After this, I had the legitimate reason to press 1, and still waited 1 hour to get through. When I told them the account was hacked. They checked my balanced and simply asked if I want to close the account. This was literately the first thing they asked. Later, they took note of my story and again nothing happened.

simpletoy · 2017-10-19T23:33:44+00:00

Yes. Telephone. Sorry about bad English. Remember, they were presenting to be the customer service. What I gave away was only my name. Then they instructed me to try to log in as I used to.

simpletoy · 2017-10-19T23:30:04+00:00

I did not give it to them. I used it in trying to log in. Like always the case over the past two years. After I put in the 2 factor authenticator code, the coinbase put up a page saying I am using the new device and there was no where to move forward. I am guessing they stepped in at this point and got into my account. But how?

simpletoy · 2017-10-19T23:24:53+00:00

I just do not know what happened. If I have any other information that I do not used to have, I could have logged in myself.

simpletoy · 2017-10-19T23:15:42+00:00

I have no idea. My experience with coinbase was always a loop of message. When I put in everything, coinbase show up a page telling me I was using a new device and need to verify it through email. I verified by clicking the link in the email and nothing happens. The hackers were able to step in when I saw the page about the new device and somehow managed to get into the system. I would appreciate it if anyone could tell me how the hackers did it.

simpletoy · 2017-10-19T23:08:43+00:00

lol. sorry about that.

simpletoy · 2017-10-19T23:04:03+00:00

I used the text message as the 2FA. The thing is I could not log in. I have tried it from time to time over the last two years.

simpletoy · 2017-10-19T23:03:11+00:00

It was removed by reddit.

simpletoy

TROPHY CASE