barniker.eth

AI | crypto data | @doodles, @proof_xyz

[barniker.eth @rbarniker]

I built a dashboard that tracks NFT projects owned by @proof_xyz collective (data from @NFTommo / @wgmiio). Dashboard link: https://t.co/nqGQQkLywP

[barniker.eth @rbarniker]

10/ If this happens to you, the crypto is gone. The attackers won. My biggest mistake was moving my ETH from my @Ledger into @coinbase w/ using staking or @coinbase vault. Tough lesson!

[barniker.eth @rbarniker]

I lost ~$55k in a Coinbase phishing scam.

@etherscan tx:
https://t.co/i0WhNOWuAq

Writeup to ensure it does not happen to anyone else:
https://t.co/2936Cd1Mmw

@brian_armstrong @SecurityGuyPhil @coinbase @CoinbaseSupport be on high alert for this!

[barniker.eth @rbarniker]

9/ @CoinbaseSupport has been absent. You will not get a person on the phone who understands this in clear terms. They will not initiate an investigation. If this happens to you, you are fucked. Dozens of crypto security ppl will spam you offering deals to help, which are scams.

[barniker.eth @rbarniker]

^ @brian_armstrong @SecurityGuyPhil you should be aware of the phishing attempts on @coinbase. I lost $50k yesterday, a material sum that I had in @coinbase as a safe harbor. cc @elonmusk

[barniker.eth @rbarniker]

10/ Everyone says "this will never happen to me"! Oliver does this dozens of times per day. It's a well oiled scheme. They just have to get a few ppl at just the wrong time: tired, in a rush. Coordination of text, calls, emails gets you disoriented and you make mistakes.

[barniker.eth @rbarniker]

11/ A $50k lesson learned: just keep your fucking cryptos in @Ledger! @coinbase can be exploited and normies (me) can be exploited by thinking there's more guardrails in place than there actually are.

[barniker.eth @rbarniker]

-- How $50k was stolen from my @coinbase --

TL;DR - my @coinbase login / pw were hacked. attacker had my phone #. they pretend to be @CoinbaseSupport in coordinated set of texts + calls. fake support attacker was more helpful than the real @CoinbaseSupport 💀

Readmore:

[barniker.eth @rbarniker]

9/ Basically @CoinbaseSupport says "sorry blockchain transactions are final." Didn't open an investigation. I go back to my day in shambles. I call back after work and after a lot of pressing / yelling @CoinbaseSupport says they will open an investigation. No opp for refund.

[barniker.eth @rbarniker]

2/ Yesterday, I get a text notifying abt a suspicious @coinbase transaction. Usually I ignore this kind of thing. They got me on the right day - running btwn some things on low sleep (just had a kid). I reply "NO."

[barniker.eth @rbarniker]

8/ I call @CoinbaseSupport.

Me: “So u know user accounts are hacked, attackers are emulating customer support, and getting ppl to liquidate their entire savings w/ a single user action.” 🗣️

@CoinbaseSupport:

[barniker.eth @rbarniker]

7/ Once this is done, Oliver disconnects. I call back, no one picks up. A few moment later, all my ETH is wiped. I see my balance implode. I see the @coinbase email. The @etherscan tx:
https://t.co/Vzs64AL0y6

[barniker.eth @rbarniker]

6/ Oliver sends @CoinbaseSupport link to report this (below). It opens to a credible looking @coinbase support page. Oliver says to copy the login attempt link from email to the support page to report it. I'm frazzled and want to get this taken care of.

[barniker.eth @rbarniker]

5/ So, at this point I'm frazzled. The mix of actual @coinbase device confirmation emails identifying a hack with Oliver aware of them is disorienting. Oliver is here help me. I'm bought into the scheme.

[barniker.eth @rbarniker]

4/ He says to check email for any recent login attempts. I check email and see this. Now I say to myself "fuck." I'm on the line w/ a guy from @CoinbaseSupport and they are calling out events (a hack) that is real.