The very recent cyberattack on Coinbase, the largest US cryptocurrency exchange, is a clear warning that the crypto industry remains vulnerable to insider threats, this time because of operational weaknesses, writes Jurgita Lapienytė, editor-in-chief at Cybernews.
In this incident, cybercriminals bribed overseas customer support agents to steal sensitive customer data, including names, addresses, phone numbers, masked bank account details, government-issued IDs, and account balances. Although less than 1% of users were affected, the breach exposed serious gaps in internal controls and third-party risk management.
Coinbase’s refusal to pay the $20 million ransom and its decision to offer a $20 million reward for information leading to the attackers’ arrest is notable. The company has also pledged to reimburse affected customers, with estimated costs reaching up to $400 million. These actions are necessary, but they also highlight the scale of the problem and the urgent need for stronger security measures across the industry.
“What stands out to me is that this breach was not about breaking through technical defenses, but about exploiting people. Even the most advanced platforms can be compromised if insiders are bribed or manipulated. This is a crucial lesson for any company with global operations: while firewalls and encryption are important for security, it’s necessary to properly train people, and maintain constant vigilance,” Lapienytė wrote. “As a journalist and as a user, I urge everyone in crypto to treat this incident as a turning point. The sector’s future depends not just on innovation, but on earning – and keeping – the trust of everyday people. Without swift action, the industry risks falling short of its own ambitions.”