The hacker who caused a data leak among Coinbase users exchanged $42.5 million.
The attacker used the THORChain protocol to do this.
He also left a message online for crypto analyst ZachXBT.
The hacker who is likely behind the massive leak of Coinbase users' data and thefts worth hundreds of millions of dollars transferred $42.5 million in cryptocurrency and left a cheeky message on the Ethereum network, crypto detective ZachXBT reported.
“The same attacker who paid Coinbase support to steal nearly $300M worth of user data just started trolling me on-chain after trading over $42.5M in Bitcoin for Ethereum via THORChain,” the analyst wrote.
Recall that since March 2025, according to ZachXBT, the attackers used 14 crypto wallets to steal from Coinbase user accounts. In May, the amount stolen exceeded $90 million, including $45 million in just one week.
On May 15, Coinbase officially acknowledged the data breach, saying it potentially impacted less than 1% of users, including KYC information, addresses, and phone numbers. The hackers used social engineering and obtained the data by bribing the exchange’s customer service staff overseas, likely in India.
The company refused to pay the $20 million ransom demanded by the hackers and instead announced the creation of a $20 million fund to track down the perpetrators. The crypto exchange's statement spoke of compensating users for their losses and cooperating with law enforcement agencies to punish the offenders.
At the same time, the company has already been hit with two class action lawsuits for negligence and failure to properly inform customers. Coinbase shares fell more than 7% after news of the leak, and the US Department of Justice has opened a criminal investigation into the incident.
Earlier, we also wrote about the consequences of the hack, which was described by Los Angeles artist Ed Suman, who lost more than $2 million in retirement savings in cryptocurrency when scammers, using his stolen data, convinced him to provide a seed phrase for a cold wallet.
