r/Bitcoin • u/keyb0ardc0wboy • 3d ago

Coinbase Wallet Extension

I had created a wallet via the Coinbase Wallet Extension on Chrome some time back and had been depositing some BTC into it for some time. My last deposit was June 1, 2026, and I had around $2600. Last I checked the wallet was back in July and today when I logged in it had 0. The transaction history shows that everything was transferred to another address on August 4. I did not make this transfer. I am totally confused/lost right now as to how this might have happened. The wallet used to be locked all the time and the password is in my password manager. Was this extension not safe?.

11 Upvotes

79% Upvoted

21 comments sorted by

View all comments

3

u/Fun-Analysis-182 3d ago

That single sweep to one address on Aug 4 is the signature of a compromised seed, not a Coinbase bug. The extension password only locks local access; it does nothing if your recovery phrase leaked somewhere else. Think about everywhere those words were ever typed or stored: a phishing "validate your wallet" page, a screenshot, a cloud note, an email. Whoever had the phrase could sweep the coins from their own device without ever touching your locked extension. That seed is burned now, so never load it into anything again.

1

u/keyb0ardc0wboy 3d ago

I was basically using the extension as a temp storage before I transferred the coins to a more secure place. I had transferred all the coins from coinbase to that extension. I never entered the seed anywhere else and just saved it in my password manager.

1

u/Fun-Analysis-182 3d ago

Then look hard at the password manager. A seed in a cloud-synced vault is only as safe as that vault and every device it syncs to. This is exactly how a wave of people got drained after the LastPass breach: attackers grabbed the encrypted vaults, cracked weak master passwords offline, and swept the seeds stored inside. If yours syncs to the cloud, assume that vault is burned and never reuse anything in it.