Coinbase says user funds are safe after third-party vendor exposes customer contact info
The crypto exchange says an incident at analytics firm Amplitude exposed some customer contact information, but insists its own systems were not breached.
Nasdaq-listed cryptocurrency exchange Coinbase has denied reports of a hack, saying customer funds are safe.
The exchange clarified that the incident that led to the breach of customer data originated at Amplitude, a third-party analytics provider, and not the exchange itself. The exposed data includes only a “small subset” of contact information, alongside data related to other Amplitude clients, Coinbase Support’s X handle said.
It said the exchange is informing impacted customers by email as required by law, while stressing that its systems have not detected any unauthorized access.
The disclosure underscores supply-chain risks, meaning customers can face security risks via third parties even when a company’s core infrastructure remains secure. Coinbase did not specify how many customers were affected or exactly which contact-data fields were involved, leaving key details unresolved.
While customer funds remain safe, exposed email addresses and phone numbers can still serve as valuable raw material for phishing and social-engineering attacks, even if passwords, private keys, and funds were not compromised.
Diversified RWA stablecoins sustain 5-7% yield from real credit as crypto funding compresses to ~4%. GENIUS pushes yield off-chain; TAM grows to $4B in 3 years.
Asanat Analysis — Why it matters
Coinbase's attribution of a customer data leak to a third-party vendor (Amplitude) is technically accurate but illustrates a recurring vulnerability in crypto infrastructure: the security perimeter extends far beyond the exchange itself. Amplitude, a product analytics platform used by thousands of apps and websites, represents a single point of failure for data aggregated across multiple services. This mirrors earlier incidents like the 3Commas breach (2021) and raises questions about vendor risk management practices across centralized exchanges.
The distinction between 'contact info exposed' versus 'funds at risk' matters operationally but not strategically. While Coinbase correctly notes its core systems weren't breached, exposed customer contact information enables phishing, SIM swaps, and social engineering attacks that can lead to fund loss regardless of exchange infrastructure integrity. For the sector, this signals that regulatory scrutiny will increasingly focus not just on exchange security audits, but on third-party vendor vetting and data minimization practices—areas where compliance frameworks remain underdeveloped.