What to do if my Coinbase Wallet is compromised?

Immediate Steps to Take When Your Coinbase Wallet Is Compromised

1. Secure access to your device immediately by disconnecting it from the internet and ensuring no unauthorized apps are running. This reduces the risk of further data exposure.

2. Contact Coinbase support without delay. While Coinbase Wallet is non-custodial and transactions cannot be reversed, reporting the incident helps in flagging suspicious activity and may assist others in the community.

3. Revoke permissions for any connected decentralized applications (dApps) through tools like Revoke.cash. Hackers often gain access via malicious smart contract approvals.

4. Transfer remaining funds to a new wallet address generated on a clean, secure device. Never reuse compromised addresses.

5. Perform a full antivirus and anti-malware scan on your phone or computer. Malicious software could have been used to log keystrokes or steal seed phrases.

Protecting Your Recovery Phrase and Seed Security

1. Never share your 12- or 24-word recovery phrase with anyone. Legitimate services will never ask for it. If you've entered it on a phishing site, assume the wallet is fully compromised.

2. Store the recovery phrase offline, preferably written on paper or engraved on metal. Avoid digital storage such as screenshots, cloud notes, or messaging apps.

3. Use a dedicated hardware wallet to store high-value assets. These devices keep private keys isolated from network-connected systems.

4. Consider using a passphrase (BIP39 extension) for an added layer of security. This creates a hidden wallet that won’t appear even if someone obtains your seed phrase.

5. Regularly audit where your recovery phrase has been stored or potentially exposed, especially after software installations or device transfers.

Recognizing Common Attack Vectors in the Crypto Space

1. Beware of fake websites mimicking Coinbase or popular dApps. Always verify URLs and use bookmarks for trusted sites.

2. Phishing emails or messages may claim your account is at risk and prompt you to enter credentials or your recovery phrase. These are always fraudulent.

3. Malicious browser extensions can inject code into wallet interfaces. Only install extensions from official stores and audit their permissions.

4. Fake customer support agents on social media or Telegram often offer help but aim to steal information. Official teams will not contact you first.

5. “Free token” airdrops may carry malicious contracts. Approving them can grant attackers unlimited access to your wallet balance.

Frequently Asked Questions

Can Coinbase recover my funds if my wallet was hacked?

No. Coinbase Wallet is non-custodial, meaning only you control the private keys. Coinbase cannot freeze accounts or reverse transactions on the blockchain.

Should I report the scam to authorities?

Yes. File a report with your national cybercrime unit or financial regulator. While recovery is unlikely, documentation helps track patterns and prevent future fraud.

Is it safe to reuse my old wallet after a compromise?

No. Once a wallet’s seed phrase or permissions are exposed, it remains vulnerable. Always migrate funds to a newly generated wallet on a secure device.

How do I check if my wallet interacted with a malicious contract?

Use blockchain explorers like Etherscan to review transaction history. Look for unfamiliar contract approvals under the “Token Approvals” section and revoke them immediately.