Summary

  • Amplitude vendor leak exposed limited Coinbase customer emails and phone numbers with no internal Coinbase systems breach confirmed.
  • Binance suffered a record $6.3 billion theft attributed to North Korean hackers prompting exchange-wide security tightening.
  • Both events highlight third-party and exchange-level security risks.

A security incident struck third-party vendor Amplitude in late October 2026. It exposed contact data for a small subset of Coinbase customers. Coinbase confirmed the breach stayed outside its systems.

Binance reported a suspected $6.3 billion theft at the same time.

The overlap drew fresh attention to crypto exchange security and third-party risks. Both incidents hit during regulatory scrutiny and market swings.

Context

Major crypto platforms still face threats from external hacks and supply-chain weaknesses. The Coinbase Amplitude breach shows how vendor ties can create indirect exposure even when an exchange keeps strong internal controls. Binance's reported loss marks the largest single crypto heist on record and highlights the scale of state-linked targeting in the sector.

These cases arrive as regulators worldwide increase oversight of exchange security practices.

The timing amplifies concerns that existing protections remain insufficient against sophisticated actors.

Details

Coinbase Support told users on X that Amplitude suffered a security incident affecting a small subset of customer contact data among other clients. The exchange denied any internal breach and told users to watch official channels for updates. Independent reporting confirmed only emails and phone numbers were involved, with no wallet or financial data exposed.

Binance reported the $6.3 billion theft in late October 2026 and said it would cover all losses from its reserves. Analysts attribute the attack to North Korean hacking groups, a pattern seen in prior large-scale crypto thefts. The exchange halted withdrawals temporarily while it investigated and added controls.

"Binance says exchange will cover all hacking losses."

, Attribution (Reuters)

The Coinbase Amplitude breach and the Binance hack together show how direct platform attacks and vendor compromises can threaten user data and assets. Industry observers note that third-party vendor risks remain an under-addressed vector despite repeated warnings.

Outlook

Exchanges are expected to review vendor contracts and speed up security audits in the coming weeks. Regulators may also request additional details on how platforms manage third-party access as scrutiny intensifies.