PHP Vulnerability Responses by Company

Coinbase, Inc.

Companies / web services
Aliases / services
コインベース / Coinbase, Inc.
Official website
https://www.coinbase.com/
Sources identifying the operating company

Each response applies only to its stated service scope. “Not listed” does not mean unpatched or unaffected.

Response status by service

support information for US retail crypto accounts

Response status
Not listed
Response information checked
2026-10-30

Current re-audit: Related incident verified; PHP connection not stated · Research date: 2026-10-30

Published May 15, 2025: Bribed overseas support staff took some customer data, potentially including contacts, ID images and balances. Passwords and private keys were excluded; Prime was not affected.

Scope: A PHP connection and response to the current PHP vulnerabilities are not listed.

What users should do

Reject requests to transfer funds to a “safe” wallet and never share authentication codes. The notice recommends hardware-key authentication and withdrawal allowlists.

Official service URL

Source URLs

  1. Official operator evidencehttps://www.coinbase.com/legal/user_agreement/united_statesService and operation documentation
  2. 2025-05-15 official noticehttps://www.coinbase.com/en-ca/blog/protecting-our-customers-standing-up-to-extortionistsService and operation documentation
Related official sources
  1. Official operator evidenceOfficial information directoryIdentifies Coinbase, Inc. and the relevant scope.
  2. 2025-05-15 official noticeOfficial notice; link to this PHP incident unconfirmedConfirms incident scope and guidance for affected people.

Comments