Coinbase Data Breach Update: Hacker Moves $42.5M in Bitcoin to Ethereum

The post Coinbase Data Breach Update: Hacker Moves $42.5M in Bitcoin to Ethereum appeared first on Coinpedia Fintech News

The hacker behind the Coinbase data breach has mocked publicly blockchain sleuth ZachXBT while swapping $42.5 million in Bitcoin to Ethereum. The message “L bozo” was left on-chain, clearly mocking ZachXBT and other analysts tracking the movement. This unusual act of digital defiance unfolded just after Coinbase refused to meet a $20 million ransom demand. The incident shocked the crypto community and investors are fearing a bigger security breach however the industry is not bowing down to such incident and plans to fight back. 

@zachxbt just reported that the threat actor who stole $300M from a Coinbase user through social engineering has swapped the 42.5M+ to ETH and is now trolling him… lol.@etherscan has already flagged the wallet, but there is another wallet the threat actor swapped to.… pic.twitter.com/LoBjAsvIiw

— Specter (@SpecterAnalyst) May 22, 2025 Coinbase Refuses $20M Ransom Demand

Coinbase confirmed that the breach originated back in December when a support agent was bribed to hand over sensitive user data. Nearly 97,000 customer accounts were exposed, including government-issued IDs and email addresses. While no passwords or private keys were compromised, the attacker threatened to exploit the data for phishing or further manipulation.

Instead of yielding to pressure, Coinbase offered a $20 million bounty to find the hacker. Soon after, the attacker moved $42.5 million in BTC to ETH using Thorchain, and then sold 8,698 ETH for $22.1 million in DAI. The transfer was traced live by analysts, making more interesting.

.article-inside-link { margin-left: 0 !important; border: 1px solid #0052CC4D; border-left: 0; border-right: 0; padding: 10px 0; text-align: left; } .entry ul.article-inside-link li { font-size: 14px; line-height: 21px; font-weight: 600; list-style-type: none; margin-bottom: 0; display: inline-block; } .entry ul.article-inside-link li:last-child { display: none; }

• Also Read :
•   Michael Arrington Warns Coinbase Hack Could Lead to Deaths – Here’s Why
•   ,

$42.5 Million in Bitcoin Swapped to Ethereum

The aftermath is expected to be costly. Coinbase estimates the total financial impact may reach $400 million. Internal reviews have led to the firing of involved employees, and new countermeasures have been rolled out to curb insider threats. Meanwhile, the U.S. Department of Justice has launched a formal investigation into the breach.

This incident underscores the growing risks of social engineering attacks in the crypto sector and highlights the urgent need for tighter operational security at major exchanges.

.article_register_shortcode { padding: 18px 24px; border-radius: 8px; display: flex; align-items: center; margin: 6px 0 22px; border: 1px solid #0052CC4D; background: linear-gradient(90deg, rgba(255, 255, 255, 0.1) 0%, rgba(0, 82, 204, 0.1) 100%); } .article_register_shortcode .media-body h5 { color: #000000; font-weight: 600; font-size: 20px; line-height: 22px; text-align:left; } .article_register_shortcode .media-body h5 span { color: #0052CC; } .article_register_shortcode .media-body p { font-weight: 400; font-size: 14px; line-height: 22px; color: #171717B2; margin-top: 4px; text-align:left; } .article_register_shortcode .media-body{ padding-right: 14px; } .article_register_shortcode .media-button a { float: right; } .article_register_shortcode .primary-button img{ vertical-align: middle; width: 20px; margin: 0; display: inline-block; } @media (min-width: 581px) and (max-width: 991px) { .article_register_shortcode .media-body p { margin-bottom: 0; } } @media (max-width: 580px) { .article_register_shortcode { display: block; padding: 20px; } .article_register_shortcode img { max-width: 50px; } .article_register_shortcode .media-body h5 { font-size: 16px; } .article_register_shortcode .media-body { margin-left: 0px; } .article_register_shortcode .media-body p { font-size: 13px; line-height: 20px; margin-top: 6px; margin-bottom: 14px; } .article_register_shortcode .media-button a { float: unset; } .article_register_shortcode .secondary-button { margin-bottom: 0; } } Never Miss a Beat in the Crypto World!

Stay ahead with breaking news, expert analysis, and real-time updates on the latest trends in Bitcoin, altcoins, DeFi, NFTs, and more.

.subscription-options li { display: none; } .research-report-subscribe{ background-color: #0052CC; padding: 12px 20px; border-radius: 8px; color: #fff; font-weight: 500; font-size: 14px; width: 96%; } .research-report-subscribe img{ vertical-align: sub; margin-right: 2px; } Subscribe to News FAQs What happened to Coinbase?

Coinbase experienced a data breach where a bribed support agent exposed sensitive user data, leading to a hacker demanding a $20 million ransom which Coinbase refused, opting to offer a bounty instead.

What triggered the recent Coinbase data breach?

The breach stemmed from a bribed support agent who exposed sensitive user data, including government IDs and email addresses, affecting ~70,000 accounts.