
Coinbase
Coinbase is a United States cryptocurrency exchange founded in 2012 and headquartered as a remote-first company incorporated in Delaware. It lets people buy, sell, store and stake crypto, and since April 2021 its parent, Coinbase Global, has traded publicly on the Nasdaq under the ticker COIN. Among large exchanges it is one of the most heavily regulated, which shapes both its safety profile and its fees.
Is Coinbase safe?
Coinbase is a custodial exchange, so the honest answer is that its safety has two parts: the company's own security, and the fact that it holds your keys for you. On the company side, Coinbase is a US public company that files audited financials with the SEC, holds customer crypto 1:1, and keeps the large majority of assets in offline cold storage. US-dollar balances are held at FDIC-insured banks, which insures the cash, not any crypto.
What that safety does not cover is your own account. Coinbase has never had its cold storage drained, but individual users are routinely targeted by phishing calls and texts that impersonate Coinbase support. Turning on an authenticator-app or hardware second factor, and treating any unexpected “Coinbase” message as hostile, protects you from the attack Coinbase cannot stop for you.
The “Coinbase withdrawal code” text is a scam
If you received a text message with a “Coinbase withdrawal code” you did not request, it is a scam, not a Coinbase feature. The message is designed to make you panic and call a number or click a link, where a fake “support agent” walks you through “cancelling” the withdrawal — which in reality hands them your account.
Coinbase does not send unsolicited withdrawal codes by SMS to “confirm” activity you did not start. A real withdrawal you initiate shows up inside the app. The safe response to one of these texts is to ignore the number in it entirely, open the Coinbase app or coinbase.com yourself, and check your account there. Never read a code aloud or type it into a page you reached from a text.
What are Coinbase's fees?
Coinbase runs two fee surfaces. The simple Coinbase app charges a spread plus a flat or percentage fee that is convenient but among the more expensive ways to trade. Coinbase Advanced (the successor to Coinbase Pro) uses a maker-taker schedule that starts near 0.6% taker for small volumes and falls with 30-day volume — far cheaper for anyone trading more than pocket money.
On top of trading fees, moving crypto off Coinbase carries the network fee of the chain you are using, which Coinbase passes through. The practical takeaway: for anything beyond an occasional small buy, use Advanced rather than the simple buy button.
Coinbase stock (COIN) vs the exchange
“Coinbase price” is ambiguous, so it is worth separating. The exchange is where you buy crypto; the stock is a share in the parent company, Coinbase Global, which trades on the Nasdaq under COIN and went public by direct listing in April 2021. Owning COIN is a bet on the company's revenue — which rises and falls with trading volumes — not a holding of any cryptocurrency. We do not quote a live COIN share price here; a brokerage or the Nasdaq is the right source for that.
Incident record
Criminals bribed a small number of overseas customer-support contractors to copy customer data, then demanded $20M to stay quiet. Coinbase refused, offered a $20M reward for the attackers instead, and estimated remediation at $180M–$400M. About 69,461 users had personal data exposed (names, contact details, partial SSNs, masked banking data, ID images). No passwords, private keys or funds were taken.
In our ratings
Where we score Coinbase against its peers on open data. The number lives there, not here.
Compare with
Our coverage of Coinbase
- Bitcoin Nears $87,000 as Weak Jobs Data Meets SEC's New Crypto Custody Proposal
- Citi Raises Bitcoin Target to $113K as Open USD Stablecoin Goes Live
- Coinbase Wins CFTC Clearinghouse Approval and Expands Citi Stablecoin Payments in the U.S.
- Bitcoin Slips to $83,000 as Strong ETF Inflows Meet Iran Risk and an SEC Delay
- Bitget's $351.6M Hack and a Delayed Fed Rate Cut Put Bitcoin's Rally to the Test
- Bitcoin Cools Below $85K as BitMEX Shuts Down, Marking a Power Shift to US Crypto Markets
Frequently asked
Is Coinbase safe to use?+
Coinbase is a US-regulated public company that holds customer crypto 1:1, keeps most assets in cold storage, and has never had its cold storage drained. The larger risk is to your individual account through phishing texts and calls impersonating Coinbase support — use an authenticator-app or hardware second factor and ignore unsolicited “Coinbase” messages.
I got a Coinbase withdrawal code text I didn't request — what is it?+
It is a phishing scam, not a Coinbase feature. Do not call the number or click the link. Open the Coinbase app or coinbase.com directly and check your account there; Coinbase does not send unsolicited SMS codes to “confirm” activity you did not start.
Was Coinbase hacked?+
Coinbase's cold storage has not been drained. In May 2025 it disclosed a data breach in which bribed overseas support contractors leaked customer personal data; no passwords, private keys or funds were exposed, and Coinbase refused the extortion demand.
What is the difference between Coinbase and COIN?+
Coinbase is the exchange where you buy crypto; COIN is the Nasdaq ticker of its parent company, Coinbase Global, which went public in April 2021. Buying COIN is owning a share in the company, not owning cryptocurrency.
What changed
- 2026-09-28Profile created: founding, listing and custody facts, fee structure, the withdrawal-code scam, and the May 2025 data breach with a funds-not-affected verdict.