Coinbase Loses $300K Due to Smart Contract Error
- Coinbase lost approximately $300,000 in token fees after approving assets to a DEX contract from the DeFi project, 0x.
- The incident was flagged by security researcher Deebeez, who noted that Coinbase’s corporate wallet interacted with a permissionless “swapper” contract.
- An MEV bot exploited this mistake, draining approved tokens including Amp and MyOneProtocol from Coinbase’s fee receiver account.
- Coinbase’s Chief Security Officer confirmed the issue was isolated and stated that no customer funds were affected.
- Following the incident, Coinbase revoked token allowances and transferred remaining assets to a new wallet.
This event highlights vulnerabilities in permissionless contracts within the DeFi ecosystem, as even established platforms like Coinbase can fall victim to exploitation through configuration errors.
The loss of $300,000 serves as an expensive lesson for Coinbase regarding smart contract management and security practices in the DEX space.
