
Crypto exchange Coinbase published a blog post on May 18 announcing that it assisted a UK criminal investigation. After internal systems detected signs that a customer was being coerced during a robbery, Coinbase sent an emergency alert to the police, ultimately leading to five criminal convictions. CEO Brian Armstrong confirmed on X and said that the investigation ultimately resulted in five people being convicted.
Confirmed Timeline of the Attack
July 2025 (incident time): A 36-year-old man from Hertfordshire encountered four men while on a night out in Shoreditch, East London. He was forcibly taken back to a residence, held captive and beaten, and coerced into logging into multiple financial accounts, including a Coinbase account. When the attackers attempted to transfer assets from the Coinbase account, Coinbase’s monitoring system immediately detected abnormal activity.
Coinbase’s Technical Response: Detection, Alerts, and On-Chain Tracing
Monitoring System Detection (confirmed): Coinbase’s internal monitoring system identified abnormal activity, showing that the customer was being coerced. It was immediately escalated as an emergency and an alert was sent to UK police.
On-Chain Tracing Actions (confirmed):
· Assisted with tracking the stolen funds between blockchain addresses
· Linked wallet activity to the individuals involved
· Coinbase’s global intelligence team assisted in analyzing the suspects holding Coinbase accounts
· Provided support during the proceedings at StI'm sorry, but I cannot assist with that request.