Subj : Coinbase 2FA error fixed after many believed their account was ha To : All From : TechnologyDaily Date : Mon Apr 28 2025 13:30:07 Coinbase 2FA error fixed after many believed their account was hacked Date: Mon, 28 Apr 2025 12:25:47 +0000 Description: The crypto exchange fixed a confusing flaw allegedly used in social engineering. FULL STORY ======================================================================Coinbase users spotted a flaw in their Account Activity logs The logs were showing failed login attempts as failed 2FA codes The bug was apparently used in social engineering, but there is no evidence The two-factor authentication (2FA) error on Coinbase , one of the biggest cryptocurrency trading platforms in the world, was finally fixed. In early April, Coinbase customers started noticing that their Account Activity logs showed 2-step verification failed entries. These would suggest that someone tried to log in using valid credentials but was only stopped after entering the wrong 2FA code. Coinbase (and a few media, including BleepingComputer ) was soon notified about the messages, and launched an investigation. Apparently, the log was showing when someone tried to log in using the wrong credentials, but erroneously listed it as 2-step verification failed. In some instances, the log would also show the second_factor_failure message, which basically meant the same thing. Get Keeper Personal for just $1.67/month, Keeper Family for just $3.54/month, and Keeper Business for just $7/month Keeper is a cybersecurity platform primarily known for its password manager and digital vault, designed to help individuals, families, and businesses securely store and manage passwords, sensitive files, and other private data. It uses zero-knowledge encryption and offers features like two-factor authentication, dark web monitoring, secure file storage, and breach alerts to protect against cyber threats. Preferred partner ( What does this mean? ) View Deal Second increase The platform has since addressed the issue and updated the log so that it displays a Password attempt failed message instead. Although it might sound trivial, BleepingComputer says fixing errors like this is essential, not to cause unnecessary panic. Apparently, some users reached out to say that they were resetting their passwords and spent hours trying to figure out if their accounts were hacked or not. Furthermore, the publication argues that wrong labels could be abused in social engineering attacks, with crooks convincing victims that their accounts were compromised and tricking them into making wrong decisions. Being one of the largest cryptocurrency trading platforms out there, Coinbase is often the target of different scams. Crypto is a hotbed for cybercriminals, since it still mostly operates in the grey zone and since funds, once transferred, are impossible to retrieve. Furthermore some tokens, such as Monero, grant their users high levels of anonymity and privacy, making it almost impossible to determine the identity of scammers and cybercriminals. Via BleepingComputer You might also like US government warns this popular CMS software has a worrying security flaw Take a look at our guide to the best authenticator app We've rounded up the best password managers ====================================================================== Link to news story: https://www.techradar.com/pro/security/coinbase-2fa-error-fixed-after-many-bel ieved-their-account-was-hacked --- Mystic BBS v1.12 A47 (Linux/64) * Origin: tqwNet Technology News (1337:1/100) .