Phishing Attacks Target Binance and Kraken as Coinbase Breach Sparks Concerns

Cryptocurrency exchanges Binance and Kraken are reported to have been victims of phishing attacks, mirroring the scheme that compromised Coinbase’s customer support team, according to a Bloomberg report published Thursday. The attempted breaches targeted customer service representatives on Telegram, with cybercriminals offering bribes in exchange for access to sensitive user information like account balances and home addresses. Unlike Coinbase, neither Binance nor Kraken experienced data loss. Internal security measures at both firms detected the social engineering attempts before damage occurred. Coinbase confirmed a successful breach of its support agents by hackers, who accessed sensitive systems, potentially costing the company up to $400 million in remediation and customer reimbursements. 5 The exchange offered a $20 million bounty for information leading to the arrest and conviction of those responsible, stating they did not expose customer funds, passwords, or private keys. The attack, however, impacted high-profile users including Sequoia Capital Managing Partner Roelof Botha whose account was compromised. Coinbase subsequently fired the India-based contractors implicated in the breach, according to the firm’s chief security officer, Philip Martin. The incident raised concerns about the vulnerability of outsourced customer support models employed by major crypto companies. The fallout extended to markets, with Coinbase shares dropping over 7% following the news before partially recovering to $264.24 during publication. Meanwhile, Coinbase CEO Brian Armstrong was in Washington D.C., lobbying lawmakers on crypto regulation and digital asset market structure reforms currently under debate in Congress. The extent of Binance and Kraken’s involvement remains unclear as both firms have not publicly commented beyond Bloomberg’s report.