Coinbase Commerce page requires users to enter seed phrases, raising security concerns

robot
Abstract generation in progress

Deep Tide TechFlow News, on March 19, according to Cointelegraph, a subdomain page of Coinbase Commerce prompted users to input their wallet seed phrases, raising concerns among security researchers. SlowMist’s Yu Xian stated that they cannot understand why Coinbase would set up such a page, directly asking users to enter seed phrases in plain text for asset recovery, which they believe poses serious security risks.

On-chain analyst ZachXBT pointed out that this page was once referenced in a Coinbase Commerce product help document, which advised users to recover funds by importing seed phrases into compatible wallets like Coinbase Wallet or MetaMask, and included a link to the withdrawal tool on that subdomain. The help document has now been removed. ZachXBT also noted that if malicious actors exploit this page, it could facilitate social engineering attacks on Coinbase users.

View Original
This page may contain third-party content, which is provided for information purposes only (not representations/warranties) and should not be considered as an endorsement of its views by Gate, nor as financial or professional advice. See Disclaimer for details.
  • Reward
  • Comment
  • Repost
  • Share
Comment
Add a comment
Add a comment
No comments
  • Pin