Coinbase Details Robust Security Measures Amidst Industry-Wide Crypto Breaches

Coinbase is reinforcing its commitment to customer asset security by detailing its extensive cold storage protocols and layered defenses, a move that comes as the cryptocurrency industry grapples with a series of high-profile hacks. The U.S.-based exchange stated that over 99% of customer crypto assets are held in offline cold storage, rendering them inaccessible to online threats.

This emphasis on security infrastructure is particularly relevant following a recent $6.4 billion hack that affected the hot wallets of rival exchange Binance. In response to the understandable customer concerns arising from such incidents, Coinbase outlined its multi-faceted approach to safeguarding digital assets. The company’s security measures include splitting private keys into multiple pieces that are never fully reassembled, limiting employee access to sensitive systems, and imposing strict speed limits on fund transfers from cold to hot wallets.

Coinbase also employs ‘kill switches’ that can immediately take signing keys offline if necessary. The company operates under the assumption that employees may be targeted by phishing attempts, and as such, its controls are designed to ensure that a stolen password, session, or device cannot be used independently to compromise assets. Sensitive actions require multiple approvals, adding another layer of protection.

In May 2025, Coinbase disclosed that criminals had bribed overseas customer support agents to steal personal data from less than 1% of its monthly transacting users. The exchange refused to pay a $20 million ransom demand related to this incident. More recently, Coinbase reported a security incident at its analytics vendor, Amplitude, which exposed contact data for a small subset of customers, though no funds were affected.

Coinbase customer assets are held on a 1:1 basis and are not lent out unless customers specifically direct it. As of September 30, the company reported $8.6 billion in cash and cash equivalents and held $377 billion in assets on its platform, underscoring its financial stability.

The broader cryptocurrency landscape continues to present security challenges. The FBI has attributed the Binance theft to North Korea’s TraderTraitor group. Blockchain analytics firm Elliptic found that the laundering of the stolen funds spanned approximately 12,000 wallets in under four days, with stablecoin issuers managing to freeze about 44% of the stolen amount. Beyond Binance, Brazil’s Mercado Bitcoin halted withdrawals following a $40 million hack, and French bank Crédit Mutuel Arkéa reported a cyberattack that resulted in a $133 million crypto theft.

Coinbase has also flagged artificial intelligence as a rapidly evolving threat and has pledged further investment in its security infrastructure to address emerging risks. While Coinbase’s robust security protocols aim to mitigate the types of risks highlighted by recent industry breaches, it is important to note that no security system can be considered entirely immune to all potential threats.

Why This Matters

The materials describe a narrow update: Coinbase stated that over 99% of customer crypto assets are held in offline cold storage, making them inaccessible to hackers. The exact timeline and full extent of the Binance laundering process beyond the initial four days.

Broader Context

Source materials place the factual news in this context: Coinbase is moving to reassure customers that what happened at Binance can’t easily happen there.