Coinbase published a High-severity advisory for its developer kit, @coinbase/wallet-sdk (versions 4.0 to before 4.3.0), and told integrators to update to 4.3.0
February 8, 2025funds not affected- Outcome
- Patched. No loss reported
Coinbase Wallet is a self-custody crypto wallet app made by Coinbase. You hold the keys, and Coinbase does not hold your coins 4. That makes it a different product from a Coinbase.com account, where the exchange keeps the assets for you. The app runs on iOS, Android, the web and as a Chrome or Brave extension 6. It lets you send, receive and swap tokens across a range of networks, and it also offers trading features such as perpetual futures through Hyperliquid 1. From July 2025 to September 2026 the same app was called Base App. Coinbase restored the old name on September 10, 2026 13.
The difference is who holds the keys. On the Coinbase exchange, Coinbase holds your crypto. It records your balance, verifies your identity, and can reset your password. In Coinbase Wallet, the private keys are stored on your own device, and you don't need a Coinbase account to use the app 4.
| Coinbase.com account | Coinbase Wallet | |
|---|---|---|
| Custody | Coinbase holds the assets | You hold the keys 4 |
| Identity check (KYC) | Required | Not required to create a wallet. Some features are geo-restricted 1 |
| Lost access | Account recovery through Coinbase | Only through your own backup (phrase, cloud backup or recovery key) 6 |
| Where trades happen | Coinbase's order books | On-chain DEXs, aggregators and connected protocols 5 |
| Exchange-level protections | Apply to custodial balances | Do not apply |
Coinbase itself says the exchange is the simpler choice if you only want to buy, sell and hold 4. You can move funds between the two like you would with any wallet. Copy the receiving address from Coinbase Wallet, choose a matching network on Coinbase, and send.
Coinbase renamed the wallet twice in 14 months. Here's what happened.
Since the reversal, Base means only Coinbase's Ethereum layer-2 network and its builder ecosystem. Coinbase Wallet is the consumer app 2. Coinbase describes the wallet as a "test kitchen" for markets that may not be listed on its exchange. That includes long-tail tokens, prediction markets, tokenized stocks and perpetual futures run by Hyperliquid 1. New asset classes go through product and compliance review before launch 1.
The wallet type you pick decides which networks you get and how you recover the wallet. According to CryptoSlate's summary of Coinbase's help documents (updated October 2026), there are three types 6:
| Wallet type | Networks | How you recover it |
|---|---|---|
| Passkey smart wallet | EVM networks only (no Bitcoin or Solana) | A recovery key, which must be created while you still have the original passkey |
| Email / social-login wallet | EVM networks, Bitcoin, Solana | Through the email or social login |
| Recovery-phrase wallet | EVM networks, Bitcoin, Solana | The 12-word recovery phrase, or an encrypted backup you set up earlier in Google Drive or iCloud |
In every case, Coinbase can't restore a wallet when the backup is gone 46. Coinbase Wallet is a hot wallet: the keys sit on a phone or computer that's connected to the internet. To sign with keys held offline, you can connect a Ledger device to the browser extension and approve each transaction on the device 5. For the general trade-offs, see hot vs cold wallets and self-custody explained.
Network support has narrowed over time. Support for BCH, ETC, XLM and XRP ended in January 2023 4. CryptoSlate reports that Dogecoin, Litecoin and custom networks were also removed, and that the classic interface closed on August 15, 2026 6. If you hold one of these assets in an old wallet, you can import the recovery phrase into another wallet that supports that chain.
You don't pay to install the app or to hold crypto in it. Costs come up when you transact:
| Activity | What you pay |
|---|---|
| Send / receive | Network fee only |
| DEX swap | A Coinbase fee of up to 1%, plus a possible aggregator fee and the network fee. All of these reduce the amount you receive 5 |
| ETH staking | 15% commission on rewards (subject to change) 6 |
| Gas on Base | Some USDC transactions get gas sponsorship (up to $0.30 per transaction and $2 per user per month) 6 |
| Perps, prediction markets, tokenized stocks | Trading and product fees. Coinbase hasn't published the fee schedule 1 |
Illustrative example (assumption-based): a $500 swap charged the full 1% Coinbase fee costs $5. Any aggregator fee and gas come on top of that. The quote screen shows the final amount before you confirm.
Coinbase Wallet doesn't pay out to a bank. To cash out, you usually send the crypto to an exchange account, such as Coinbase.com, and sell it there.
There's no central pool of wallet funds, so attacks usually go after the user. Phishing sites, fake "Coinbase Wallet support" agents and malicious token approvals are the usual routes. Coinbase says the wallet detects and hides scam or malicious tokens 1. Never type a recovery phrase into a website, and never share it with anyone claiming to be support. Phone numbers for "Coinbase Wallet support" found through search results are a common lure. More: crypto phishing. No breach of the wallet app that drained user funds was found in the sources reviewed.
Hacks in DefiLlama’s public database are also scored as the security record on the Coinbase Wallet (Base App) rating page.
For tax treatment of on-chain swaps, see how crypto taxes work. For CoinPulse's separate evaluation, see CoinPulse's Coinbase Wallet rating and evidence or the crypto wallet ratings.
WalletsSoftware Wallets: How They WorkA software wallet is an app that stores your private keys on a phone or computer, letting you hold and use crypto directly without a custodian.7 min read·
WalletsSelf-Custody: A Practical GuideSelf-custody means holding your own private keys instead of trusting a company. Here is how it works, what it demands of you, and how to do it safely.7 min read·SecurityHot wallet vs cold wallet: which should you use?A clear, beginner-friendly breakdown of hot wallets vs cold wallets, how each protects your crypto, and how to choose the right mix for your needs.8 min read·
SecurityCrypto Phishing Attacks and How to Beat ThemCrypto phishing tricks you into revealing keys or signing malicious transactions. Learn the common attacks, the red flags, and how to defend your wallet.7 min read·
RegulationBitcoin ETF Outflows Weigh on Market as Interactive Brokers Launches Ethereum StakingSpot Bitcoin ETFs recorded $65.4 million in net outflows as hawkish Federal Reserve comments pressured prices. Meanwhile, Interactive Brokers rolled out Ethereum staking for eligible US clients.4 min read·
MarketsCFTC Opens Retail Crypto Leverage Rulemaking as Bitcoin Holds Near $84KThe CFTC has begun a rulemaking on leveraged retail crypto trading, while Bitcoin hovers near $84,000 and traders wait for U.S. inflation data and the Fed’s October meeting.4 min read·
MarketsUS Moves $1B in Seized Bitcoin as Senate Scrutiny of Tether GrowsU.S.-linked wallets shifted 12,267 BTC from a Bitfinex hack seizure address without any exchange deposit, while Senator Richard Blumenthal pressed Cantor Fitzgerald over its Tether partnership.3 min read·