Missing bitcoins on Coinbase
So here I am, knowing they are a ycombinator backed company, posting here, to find out what the heck is going on? I perused twitter to see if maybe other people are having this same problem.
Looks like I am not alone!
"@brian_armstrong @coinbase Still no response on my support request. I'm still missing 9.6 BTC. Can you tell me what's going on?" https://twitter.com/thomrburg/status/303870208102248448
"@coinbase Day 3 of missing BTC. Imagine if your bank suddenly took your cash from your account." https://twitter.com/aginanon/status/303653952162000897
"Balance says 0 when I should have around 80btc?! Heard @coinbase was having some issues but that they had been resolved.. whats the dealio?" https://twitter.com/jacobparrish/status/303642200707854336
"@jacobparrish @coinbase I'm still having the same problem too! Really nerve-racking." https://twitter.com/nsillik/status/303650076549591040
It is time to come clean. What happened to our money? Why haven't you responded to anyone in 48 hours about this?
22 comments
[ 2.1 ms ] story [ 54.2 ms ] thread@teevers @jacobparrish yup. It was fixed for me at about 4pm pacific yesterday.
I noticed Coinbase credits users even without transaction confirmations. Then I noticed withdrawals used the same inputs from the deposits the user receives.
This could be bad and good:
1) (good) User is immediately notified when Coinbase is breached. It's the moment when they notice their deposit address is sending coins to a address that is not their's.
2) (bad) There is one chance to protect the coins. If you even think the private keys are compromised, you would have to be safe and broadcast the move of coins to new addresses. This will be really messy.
3) (bad) Anonymity reduction. The user can't launder coins in the network. Withdrawing deposited coins will appear to be a direct transaction from:
A -> B (deposit) then B -> C (withdrawal)
instead of:
A -> B (deposit) then Z (other user's coins) -> C
Also, is Coinbase moving to a client-sided wallet approach?
It's definitely not perfect yet, but the security benefits are important. We posted an update on the payouts via unconfirmed transactions as well: http://blog.coinbase.com/post/43285532179/unconfirmed-transa...
Just generally, we are going through hyper growth right now, so this tends to magnify small problems. Thank you for bearing with us!
Fair play for posting on HN, but Coinbase is a great company and Brian's a top guy – I think it's better to give him the benefit of the doubt. I've been humbled in the past by jumping to conclusions or venting too early.
This is at worst a technical issue combined with a minor customer support mishap (i.e. not being available when needed).
Disclaimer: amorphid is full of $#it. I did not invent email and SMS alerts. I was having too fun thinking up a sequel to the duck billed platypus to worry about digital communication.
-God
P.S. Love of money is still evil, but I gotta admit Bitcoin is pretty cool.
If the balance on my online banking is incorrect, I calmly ring customer service, knowing they'll fix it. With CoinBase I'd react completely differently. With the amount of other Bitcoin services that have been hacked in the past, I'd be scared CoinBase had met the same fate.
Thanks,
-Peter
Update: I still have not received any emails from coinbase to either of my gmail accounts, so I decided to try sending the verification email to my yahoo account. That worked! Then I went to account settings and switched to my gmail account and clicked on "save". Everything looks good now. But how can I know for sure that my gmail account is actually connected now to my coinbase account? No emails have been sent to either my gmail or yahoo account letting me know that I had changed email addresses in my coinbase account settings. Is there a way I can verify that peter41144@gmail.com is now actively connected to my coinbase account?
Thanks