Coinbase Core開發人員Eric Conner召集了Coinbase Wallet的異常鎖定

以太坊核心開發人員和前以太坊基金會成員埃里克·康納（Eric Conner）最近在Twitter上發洩有關Coinbase Wallet的異常鎖定

"I want to send ETH to a friend, and a random question about my transaction pops up in the user interface. Obviously, my answer didn't pass, so I have to reset my password, and my account is locked??? Is this a joke?"

“我想將ETH發送給朋友，並且關於我的交易的隨機問題在用戶界面中彈出。顯然，我的答案沒有通過，所以我必須重置密碼，我的帳戶被鎖定了嗎？

Ethereum core developer and former Ethereum Foundation member Eric Conner recently expressed his dissatisfaction with Coinbase Wallet's lockout in a tweet, sparking discussion among crypto enthusiasts.

以太坊核心開發商和前以太坊基金會成員埃里克·康納（Eric Conner）最近在一條推文中對Coinbase Wallet的鎖定表示不滿，引發了加密助人的討論。

After encountering difficulties withdrawing funds from Coinbase, one user commented, "I feel like I've been a victim of Coinbase for a long time."

在遇到了從Coinbase撤回資金的困難後，一位用戶評論說：“我覺得我很長一段時間以來一直是Coinbase的受害者。”

Nansen CEO Alex Svanevik chimed in, "Welcome to the hell of Coinbase."

Nansen首席執行官Alex Svanevik插話說：“歡迎來到Coinbase的地獄”。

Management consultant and Ethereum investor "DCinvestor.eth" suggested, "I recommend not sending funds to addresses that don't belong to you via Coinbase. Just send them to your on-chain wallet first, then send them anywhere you want."

管理顧問和以太坊投資者“ dcinvestor.eth”建議，“我建議不要通過Coinbase向不屬於您的地址匯款。只需將它們發送到您的鍊鍊錢包，然後將其發送給您想要的任何地方。”

Coinbase Wallet, a non-custodial wallet that claims users "have complete control over their private keys," should ideally possess a high degree of decentralization. However, this incident has exposed contradictions in the platform's underlying logic: while emphasizing user autonomy, it still relies on centralized servers to implement risk control strategies and directly locks accounts when users fail verification.

Coinbase Wallet是一種非習慣錢包，聲稱用戶“完全控制其私鑰”，理想情況下應該具有高度的權力下放。但是，該事件暴露了該平台基礎邏輯中的矛盾：在強調用戶自主權的同時，它仍然依靠集中式服務器來實施風險控制策略，並在用戶失敗驗證時直接鎖定帳戶。

This move has undoubtedly sparked widespread attention and discussion in the crypto community—has Coinbase gone too far with its regulations, or is the current industry environment forcing trading platforms to adopt stricter security measures?

這一舉動無疑引起了加密社區的廣泛關注和討論，而Coinbase的法規過遠，還是當前的行業環境迫使交易平台採取更嚴格的安全措施？

One-size-fits-all security measures and account management have long been a subject of contention.

長期以來，所有規模的安全措施和帳戶管理一直是爭論的主題。

Coinbase's aggressive security strategy has been a subject of discussion. In January 2025, a former Coinbase employee publicly accused the company of freezing his account without any reason for two months, preventing him from paying for his wedding.

Coinbase的積極安全策略一直是討論的主題。 2025年1月，一位前Coinbase僱員公開指責該公司在兩個月內沒有任何理由凍結其帳戶，以阻止他為婚禮付費。

He stated that the account had long been used for receiving salary and conducting crypto transactions, and there had been no unusual activity prior. However, Coinbase refused to provide specific reasons for the freeze, citing "user protection," and did not offer effective channels for appeal. This incident quickly escalated, further amplifying market skepticism about Coinbase's account management mechanisms.

他說，該帳戶長期以來一直用於接收薪水和進行加密交易，並且在沒有異常活動之前。但是，Coinbase拒絕以“用戶保護”為特定的凍結理由，並且沒有提供有效的上訴渠道。這一事件迅速升級，進一步擴大了市場對Coinbase帳戶管理機制的懷疑。

In recent years, Coinbase has adopted a cautious risk control strategy for user account management. While such strict measures can indeed reduce the risk of the exchange being hacked to some extent, the over-reliance on automated risk control systems and the lack of transparency in operational models have left many innocent users troubled.

近年來，Coinbase為用戶帳戶管理採用了謹慎的風險控制策略。儘管這種嚴格的措施確實可以減少交換在某種程度上被黑客入侵的風險，但對自動風險控制系統的過度依賴，並且操作模型中缺乏透明度，使許多無辜的用戶遇到了困擾。

Especially in an environment where Web3 emphasizes decentralization and self-control, the rationality of such centralized risk control methods has been heavily criticized.

特別是在Web3強調權力下放和自我控制的環境中，這種集中風險控制方法的合理性受到了嚴重的批評。

Third-party service vulnerabilities may become weak links in the security chain.

第三方服務漏洞可能會成為安全鏈中的薄弱環節。

Despite Coinbase and other trading platforms continuously strengthening their internal risk control mechanisms, external dependencies may still pose the biggest vulnerabilities in the security chain. A typical case is the recent security incident involving Binance.

儘管Coinbase和其他交易平台不斷增強其內部風險控制機制，但外部依賴性仍可能構成安全鏈中最大的脆弱性。一個典型的案例是最近涉及Binance的安全事件。

On February 25, a post accusing hackers of transferring assets through red envelopes was widely shared on Twitter. The tweet explained that the user's Binance account, email, and Google Authenticator had all been hacked. Although the hacker could not normally withdraw funds and had to wait 24 hours to withdraw after changing the password, Binance's red envelope feature was still functional, acting like a bug that allowed the hacker to transfer assets immediately.

2月25日，在Twitter上廣泛分享了一篇指控黑客通過紅色信封轉移資產的帖子。該推文解釋說，用戶的binance帳戶，電子郵件和Google Authenticator都已被黑客入侵。儘管黑客通常無法提取資金，並且在更改密碼後不得不等待24小時才能提取，但Binance的Red Invelope功能仍然有效，就像一個錯誤一樣，使黑客可以立即轉移資產。

The image shows the red envelope transfer records of the stolen user's Binance account.

該圖顯示了被盜用戶二元帳戶的紅色信封傳輸記錄。

Even more concerning, just one day later, security company SlowMist's CISO 23pd warned on Twitter that users had received "forged Binance official text messages," which appeared in the same conversation thread as previous official notifications from Binance. This precise imitation attack method suggests that hackers may have infiltrated part of the third-party SMS service supply chain, thereby increasing the stealth and success rate of the attacks.

更令人擔憂的是，就在一天后，安全公司Slowmist的CISO 23pd在Twitter上警告說，用戶已收到“偽造的binance官方短信”，該消息與Binance先前的官方通知出現在同一對話線程中。這種確切的模仿攻擊方法表明，黑客可能已經滲透到第三方SMS服務供應鏈中的一部分，從而提高了攻擊的隱身和成功率。

In contrast, while Coinbase has not reported similar attack incidents, its recent cryptocurrency lending service has experienced delays and performance issues, indicating potential risks in the platform's technical architecture. For exchanges, in addition to strengthening their own system defenses, they also need to enhance their security monitoring capabilities for third-party services (such as email, SMS, authenticators, etc.) to prevent external dependencies from becoming loopholes for hackers.

相比之下，儘管Coinbase尚未報告類似的攻擊事件，但其最近的加密貨幣貸款服務遇到了延遲和性能問題，表明該平台技術架構中的潛在風險。對於交流，除了加強自己的系統防禦能力外，他們還需要增強對第三方服務（例如電子郵件，SMS，身份驗證者等）的安全監控功能，以防止外部依賴性成為黑客漏洞。

As of the first quarter of 2025, Coinbase's global user base has surpassed 56 million. However, with the rapid expansion of the user base, the platform's shortcomings in customer support and account management have gradually become apparent.

截至2025年第一季度，Coinbase的全球用戶群已超過5600萬。但是，隨著用戶群的快速擴展，平台在客戶支持和帳戶管理方面的缺點逐漸變得顯而易見。

For a long time, Coinbase has been criticized for its opaque token review standards. This extreme caution regarding compliance seems to be reflected in account management as well, leading many users to struggle to obtain clear explanations after their accounts are banned. In the former employee's account freeze incident, the user claimed that Coinbase "provided no effective support for two months," further highlighting the issue of inadequate customer service response.

長期以來，Coinbase因其不透明的令牌評論標準而受到批評。關於合規性的這種極端謹慎似乎也反映在帳戶管理中，導致許多用戶在禁止其帳戶後難以獲得明確的解釋。在前員工的帳戶凍結事件中，用戶聲稱Coinbase“在兩個月內沒有提供有效的支持”，進一步強調了客戶服務響應不足的問題。

On the other hand, Binance, when responding to hacking attacks, only suggested users enable biometric login without proactively taking large-scale investigation measures. This indicates that the current

另一方面，當對黑客攻擊做出響應時，僅建議用戶可以在不主動採取大規模調查措施的情況下啟用生物識別登錄。這表明電流