I didn't see unusual login activities on my Microsoft account activity history though. Yes, I would say both my Microsoft and Google account was compromised, and Gmail is the recovery email for the Microsoft account, but I did turn on 2FA for both account. Plus I would need to unlock my phone to see the codes in the Microsoft Authenticator and when the hacker was draining my Coinbase account, my phone is in my pocket. Even if someone else has my Microsoft account and password they wouldn't know what's on my iPhone screen. What they told me is that Microsoft Authenticator 2FA is bound with my device. Thanks for your reply, but that's different from what I heard from Microsoft support. Now that there is a huge security problem with 2FA, I am not sure if I trust Coinbase anymore. I filed a claim with Case #08414554 but haven't heard from them for days.Ĭan someone at least help explain the 2FA situation? Did the hacker actually bypass it or did the hacker know my 2FA code? I am not feeling safe about it since I also use Authenticator App for other accounts.Ĭoinbase is supposed to be a well-known company. How could they do that without my 2FA? I have confirmed with both Apple and Microsoft that my phone is not hacked and no one else should see my 2FA code even if they have my password.

Most of my cryptocurrencies are cashed out and transferred to an unknown bank account. However, one or two days later, my account was still drained. I changed my password immediately, and have turn-on 2FA via iPhone Authenticator App for any amount of transaction. Hi, my google account was compromised, and I saved the Coinbase password in the Chrome password manager.

2fa for coinbase app