Does Coinbase's Security Hold Up After $6B Binance Hack?

Over 20 months, Binance, Bybit, and Bitget lost more than $8 billion combined to hackers. In none of these incidents were the exchanges' private keys compromised. Instead, the attackers manipulated internal approval systems to authorize withdrawals.

The threat extends past exchange customers. Coinbase, which hasn't reported a similar breach, custodies the Bitcoin backing most US spot Bitcoin ETFs. Its security now safeguards institutional money as well.

How Hackers Got Past 3 Exchanges

On October 29, Binance suffered a loss of roughly $6.3 billion. According to co-CEO Richard Teng, the attack originated from a laptop belonging to an engineer that was compromised. Binance reported no indication of a private key theft.

“To be clear: the attacker did not simply use one engineer’s permissions, and this was not a single ‘one-click’ action,” Teng stated.

In February 2025, Bybit saw a loss of almost $1.5 billion. Attackers inserted code into Safe{Wallet}, a third-party application Bybit employed for transfer approvals. Employees viewed one address while authorizing a different one. The FBI attributed the heist to North Korea.

Bitget lost roughly $387.5 million in September. The hackers exploited vulnerabilities in external security tools, allowing fraudulent withdrawal requests to go through Bitget's standard signing procedure.

What Coinbase Does Differently

Coinbase employs multi-party computation (MPC), which breaks each key into fragments stored across different machines. Greg Tusar, co-CEO of Coinbase Institutional, explained this in 2025.

“MPC ensures that full private keys are never stored at rest, nor in any single machine during signing and when in use,” Tusar explained.

Coinbase further claims that all security-critical software is developed internally. The breaches at Bitget and Bybit both involved third-party components.

Researcher Zeeme contends that this approach prevents all three attack methods, as a compromised laptop would only provide a single worthless key fragment.

Why Hackers Hit Binance, Bybit & Bitget — Still Can’t Touch Coinbase: 🧵👇

959K BTC. $103.31 Billion. 14 Years. 🔒

1. No Giant Honeypot — 69.8M Separate Addresses
Most exchanges pool billions inside a few live "hot wallets" for fast withdrawals. @coinbase doesn’t do that.…

— Zeeme ⚡ | On-Chain Research (@0x_zeeme) November 1, 2026

According to Arkham data, Coinbase's wallets contain approximately 959,000 BTC distributed across 69.8 million addresses. At Bitcoin's current price, that holding is valued at $74.7 billion.

“Coinbase is safe. We’re monitoring price volatility, tracking stolen funds on-chain, and remaining vigilant as ever,” Rob Witoff, Coinbase Chief Technology Officer.

“We are blocking sends to compromised Binance wallets and have made some adjustments to our cold storage systems solely out of an abundance of caution. Again,” said Jeff Lunglhofer, CSO at Coinbase. 

No Platform Is Immune To Security Incidents

Coinbase, however, has not been entirely immune to security issues. In 2025, overseas support personnel were bribed by criminals to disclose customer information. Coinbase estimated the damage at between $180 million and $400 million, reporting to The Register, but noted that funds were never compromised.

Its scale presents another risk. Researcher Marc Baumann projected in April that Coinbase controls 84% of US spot Bitcoin ETF holdings.

According to Baumann's estimate, that places roughly $77 billion under one custodian. Not all ETF issuers depend solely on Coinbase; Fidelity manages its own fund's Bitcoin, and Morgan Stanley lists BNY as an additional custodian.

For ETF investors, the key question is whether Coinbase's safeguards will prove effective where those of its competitors fell short. Each of the three hacks targeted the authorization phase, which Coinbase claims it inspects for manipulation before signing any transaction.