Coinbase says it prevented over 1,000 customers from sending $280,000 worth of bitcoin to Twitter hackers

Quick Take

  • Coinbase has said that it prevented little over 1,100 customers from sending 30.4 bitcoin to Twitter hackers last week 
  • At least five crypto platforms, including Binance, Coinbase and BitPay, are said to have interacted with hackers’ addresses 
  • A Binance spokesperson told The Block: “A small amount of BTC (equivalent to about $10) was sent to a Binance core wallet address”

Crypto exchange Coinbase has said that it prevented little over 1,100 customers from sending bitcoin to Twitter hackers who hijacked high-profile accounts to advertise a bitcoin scam last week.

If Coinbase didn't take the step, these customers would have collectively sent 30.4 bitcoin (currently worth about $278,000) to hackers, the exchange's chief information security officer, Philip Martin, told Forbes. Notably, this amount is more than twice the actual amount ($121,000) that hackers collected via victims.

Despite Coinbase's action, its 14 customers still fell prey to the scam and sent around $3,000 worth of bitcoin to hackers before the exchange blacklisted their addresses, said Martin.

Gemini, Kraken, and Binance users also tried sending bitcoins to the addresses, but not as much as Coinbase's customers, per the report. All these exchanges moved to block the addresses as soon as the scam came to light.

The wide-spread attack took place on Wednesday on Twitter, which saw 130 accounts under its control, including those owned by major figures like Barack Obama, Bill Gates and Elon Musk.

Following the bitcoin

According to blockchain analytics firms, some of the stolen bitcoin has moved to some exchanges and bitcoin mixers like Wasabi Wallet.

"We can see very small amounts going to known, regulated crypto exchanges," Elliptic's co-founder and chief scientist Tom Robinson told The Block. He declined to disclose the names of the exchanges for confidentiality reasons. Robinson further said that 2.89 bitcoin, or 22% of the total amount, was also sent to Wasabi Wallet for mixing purposes.


Keep up with the latest news, trends, charts and views on crypto and DeFi with a new biweekly newsletter from The Block's Frank Chaparro

By signing-up you agree to our Terms of Service and Privacy Policy
By signing-up you agree to our Terms of Service and Privacy Policy

Another blockchain analytics firm Whitestream told The Block that one of the hackers' addresses has interacted with at least three crypto platforms. "We can see that one address was interacted with addresses that related to several digital currency payment processors --CoinPayments, Coinbase, and BitPay," Itsik Levy, co-founder and CEO of Whitestream told The Block.

Indeed, a BitPay spokesperson confirmed to The Block: "BitPay confirms a purchase occurred at one of its merchants in the amount of $25 in May 2020 from one of the Twitter hacker’s addresses. As part of BitPay’s standard process and procedure, available details are being shared with appropriate parties including law enforcement."

CoinPayments declined to comment to The Block, while Coinbase did not return requests for comment.

Blockchain Intelligence Group, on the other hand, said some of the stolen bitcoin also got sent to Binance.

Indeed, a Binance spokesperson confirmed to The Block that "a small amount of BTC (equivalent to about $10) was sent to a Binance core wallet address. It seems they [hackers] made the move to confuse blockchain researchers."

According to The Block Research, Kraken and Binance-acquired Indian crypto exchange WazirX also received some portion of the stolen bitcoin.

© 2023 The Block. All Rights Reserved. This article is provided for informational purposes only. It is not offered or intended to be used as legal, tax, investment, financial, or other advice.

About Author

Yogita Khatri is a senior reporter at The Block, covering all things crypto. As one of the earliest team members, Yogita has played a pivotal role in breaking numerous stories, exclusives and scoops. With nearly 3,000 articles under her belt, Yogita holds the records as The Block's most-published and most-read author of all time. Prior to joining The Block, Yogita worked at crypto publication CoinDesk and The Economic Times, where she wrote on personal finance. To contact her, email: [email protected]. For her latest work, follow her on X @Yogita_Khatri5.