Not sure anything can be done, but I want to know how they did it and to prevent them using the coins if at all possible. Here are the details of the theft.

You just sent 0.8495 BTC (worth $604.46 USD) to 16fYQiV2cdHuycGo3eibE5JSKvndY2z8Gw.

~6.40GMT 29th December.

I only access coinbase via the android app, did this get compromised somehow?

  • Do you install a lot of obscure/shady apps on your android phone, especially without reading what permissions they accept? You can read this - android.stackexchange.com/questions/55666/… – sashoalm Dec 29 '13 at 12:41
  • No, im pretty careful on what I install and lean on apps. – JKL Dec 29 '13 at 17:32

Unless you happen to know who owns 16fYQiV2cdHuycGo3eibE5JSKvndY2z8Gw, there is no way for you to get back your Bitcoin. You could try to raise awareness that this address holds stolen coin, but I don't see how that would benefit you in any way. What happened is essentially the Bitcoin equivalent of somebody taking your dollar bills from your wallet without you noticing.

You might want to get in touch with the Coinbase support and see if they have a policy regarding such events. You might also want to use more secure methods of storing your bitcoin in the future, such as password protected desktop wallets, paper wallets, or at least an online wallet with two way authenticated spending access.

As of how exactly the attacker gained access, I cannot tell from the information provided. It could either be by having compromised your android device or by having compromised your account at Coinbase directly.

| improve this answer | |
  • 1
    yea clearly a learning experience and a warning to anyone wanting to store coins in the cloud. Contacted coinbase they have asked some questions so waiting response, will post back if I learn anything interesting. – JKL Dec 29 '13 at 17:32

I had the exact same thing happen to my Coinbase account. I did use the two part authentication and did not enable the api key. however the api key was enabled. Coinbase does nothing and says I logged into to a coinbase phishing site, but I only logged into coinbase from my bookmarked link.

| improve this answer | |

Have you ever turned on API access to your account? I seem to be seeing a lot of issues losing bitcoin after enabling the API.

| improve this answer | |
  • 1
    No - but after some digging yesterday i realised that the android app I am using (the official coinbase one) turned it on for me. I think this is the weak point that was exploited although would be interested to understand how... – JKL Dec 30 '13 at 14:03

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.