Coinbase Core开发人员Eric Conner召集了Coinbase Wallet的异常锁定

以太坊核心开发人员和前以太坊基金会成员埃里克·康纳（Eric Conner）最近在Twitter上发泄有关Coinbase Wallet的异常锁定

"I want to send ETH to a friend, and a random question about my transaction pops up in the user interface. Obviously, my answer didn't pass, so I have to reset my password, and my account is locked??? Is this a joke?"

“我想将ETH发送给朋友，并且关于我的交易的随机问题在用户界面中弹出。显然，我的答案没有通过，所以我必须重置密码，我的帐户被锁定了吗？

Ethereum core developer and former Ethereum Foundation member Eric Conner recently expressed his dissatisfaction with Coinbase Wallet's lockout in a tweet, sparking discussion among crypto enthusiasts.

以太坊核心开发商和前以太坊基金会成员埃里克·康纳（Eric Conner）最近在一条推文中对Coinbase Wallet的锁定表示不满，引发了加密助人的讨论。

After encountering difficulties withdrawing funds from Coinbase, one user commented, "I feel like I've been a victim of Coinbase for a long time."

在遇到了从Coinbase撤回资金的困难后，一位用户评论说：“我觉得我很长一段时间以来一直是Coinbase的受害者。”

Nansen CEO Alex Svanevik chimed in, "Welcome to the hell of Coinbase."

Nansen首席执行官Alex Svanevik插话说：“欢迎来到Coinbase的地狱”。

Management consultant and Ethereum investor "DCinvestor.eth" suggested, "I recommend not sending funds to addresses that don't belong to you via Coinbase. Just send them to your on-chain wallet first, then send them anywhere you want."

管理顾问和以太坊投资者“ dcinvestor.eth”建议，“我建议不要通过Coinbase向不属于您的地址汇款。只需将它们发送到您的链链钱包，然后将其发送给您想要的任何地方。”

Coinbase Wallet, a non-custodial wallet that claims users "have complete control over their private keys," should ideally possess a high degree of decentralization. However, this incident has exposed contradictions in the platform's underlying logic: while emphasizing user autonomy, it still relies on centralized servers to implement risk control strategies and directly locks accounts when users fail verification.

Coinbase Wallet是一种非习惯钱包，声称用户“完全控制其私钥”，理想情况下应该具有高度的权力下放。但是，该事件暴露了该平台基础逻辑中的矛盾：在强调用户自主权的同时，它仍然依靠集中式服务器来实施风险控制策略，并在用户失败验证时直接锁定帐户。

This move has undoubtedly sparked widespread attention and discussion in the crypto community—has Coinbase gone too far with its regulations, or is the current industry environment forcing trading platforms to adopt stricter security measures?

这一举动无疑引起了加密社区的广泛关注和讨论，而Coinbase的法规过远，还是当前的行业环境迫使交易平台采取更严格的安全措施？

One-size-fits-all security measures and account management have long been a subject of contention.

长期以来，所有规模的安全措施和帐户管理一直是争论的主题。

Coinbase's aggressive security strategy has been a subject of discussion. In January 2025, a former Coinbase employee publicly accused the company of freezing his account without any reason for two months, preventing him from paying for his wedding.

Coinbase的积极安全策略一直是讨论的主题。 2025年1月，一位前Coinbase雇员公开指责该公司在两个月内没有任何理由冻结其帐户，以阻止他为婚礼付费。

He stated that the account had long been used for receiving salary and conducting crypto transactions, and there had been no unusual activity prior. However, Coinbase refused to provide specific reasons for the freeze, citing "user protection," and did not offer effective channels for appeal. This incident quickly escalated, further amplifying market skepticism about Coinbase's account management mechanisms.

他说，该帐户长期以来一直用于接收薪水和进行加密交易，并且在没有异常活动之前。但是，Coinbase拒绝以“用户保护”为特定的冻结理由，并且没有提供有效的上诉渠道。这一事件迅速升级，进一步扩大了市场对Coinbase帐户管理机制的怀疑。

In recent years, Coinbase has adopted a cautious risk control strategy for user account management. While such strict measures can indeed reduce the risk of the exchange being hacked to some extent, the over-reliance on automated risk control systems and the lack of transparency in operational models have left many innocent users troubled.

近年来，Coinbase为用户帐户管理采用了谨慎的风险控制策略。尽管这种严格的措施确实可以减少交换在某种程度上被黑客入侵的风险，但对自动风险控制系统的过度依赖，并且操作模型中缺乏透明度，使许多无辜的用户遇到了困扰。

Especially in an environment where Web3 emphasizes decentralization and self-control, the rationality of such centralized risk control methods has been heavily criticized.

特别是在Web3强调权力下放和自我控制的环境中，这种集中风险控制方法的合理性受到了严重的批评。

Third-party service vulnerabilities may become weak links in the security chain.

第三方服务漏洞可能会成为安全链中的薄弱环节。

Despite Coinbase and other trading platforms continuously strengthening their internal risk control mechanisms, external dependencies may still pose the biggest vulnerabilities in the security chain. A typical case is the recent security incident involving Binance.

尽管Coinbase和其他交易平台不断增强其内部风险控制机制，但外部依赖性仍可能构成安全链中最大的脆弱性。一个典型的案例是最近涉及Binance的安全事件。

On February 25, a post accusing hackers of transferring assets through red envelopes was widely shared on Twitter. The tweet explained that the user's Binance account, email, and Google Authenticator had all been hacked. Although the hacker could not normally withdraw funds and had to wait 24 hours to withdraw after changing the password, Binance's red envelope feature was still functional, acting like a bug that allowed the hacker to transfer assets immediately.

2月25日，在Twitter上广泛分享了一篇指控黑客通过红色信封转移资产的帖子。该推文解释说，用户的binance帐户，电子邮件和Google Authenticator都已被黑客入侵。尽管黑客通常无法提取资金，并且在更改密码后不得不等待24小时才能提取，但Binance的Red Invelope功能仍然有效，就像一个错误一样，使黑客可以立即转移资产。

The image shows the red envelope transfer records of the stolen user's Binance account.

该图显示了被盗用户二元帐户的红色信封传输记录。

Even more concerning, just one day later, security company SlowMist's CISO 23pd warned on Twitter that users had received "forged Binance official text messages," which appeared in the same conversation thread as previous official notifications from Binance. This precise imitation attack method suggests that hackers may have infiltrated part of the third-party SMS service supply chain, thereby increasing the stealth and success rate of the attacks.

更令人担忧的是，就在一天后，安全公司Slowmist的CISO 23pd在Twitter上警告说，用户已收到“伪造的binance官方短信”，该消息与Binance先前的官方通知出现在同一对话线程中。这种确切的模仿攻击方法表明，黑客可能已经渗透到第三方SMS服务供应链中的一部分，从而提高了攻击的隐身和成功率。

In contrast, while Coinbase has not reported similar attack incidents, its recent cryptocurrency lending service has experienced delays and performance issues, indicating potential risks in the platform's technical architecture. For exchanges, in addition to strengthening their own system defenses, they also need to enhance their security monitoring capabilities for third-party services (such as email, SMS, authenticators, etc.) to prevent external dependencies from becoming loopholes for hackers.

相比之下，尽管Coinbase尚未报告类似的攻击事件，但其最近的加密货币贷款服务遇到了延迟和性能问题，表明该平台技术架构中的潜在风险。对于交流，除了加强自己的系统防御能力外，他们还需要增强对第三方服务（例如电子邮件，SMS，身份验证者等）的安全监控功能，以防止外部依赖性成为黑客漏洞。

As of the first quarter of 2025, Coinbase's global user base has surpassed 56 million. However, with the rapid expansion of the user base, the platform's shortcomings in customer support and account management have gradually become apparent.

截至2025年第一季度，Coinbase的全球用户群已超过5600万。但是，随着用户群的快速扩展，平台在客户支持和帐户管理方面的缺点逐渐变得显而易见。

For a long time, Coinbase has been criticized for its opaque token review standards. This extreme caution regarding compliance seems to be reflected in account management as well, leading many users to struggle to obtain clear explanations after their accounts are banned. In the former employee's account freeze incident, the user claimed that Coinbase "provided no effective support for two months," further highlighting the issue of inadequate customer service response.

长期以来，Coinbase因其不透明的令牌评论标准而受到批评。关于合规性的这种极端谨慎似乎也反映在帐户管理中，导致许多用户在禁止其帐户后难以获得明确的解释。在前员工的帐户冻结事件中，用户声称Coinbase“在两个月内没有提供有效的支持”，进一步强调了客户服务响应不足的问题。

On the other hand, Binance, when responding to hacking attacks, only suggested users enable biometric login without proactively taking large-scale investigation measures. This indicates that the current

另一方面，当对黑客攻击做出响应时，仅建议用户可以在不主动采取大规模调查措施的情况下启用生物识别登录。这表明电流