A cybercriminal operating under the pseudonym “Excite” is making waves after flaunting ill-gotten wealth, including a monkey and luxury watches, allegedly purchased with stolen funds from a massive Coinbase Commerce exploit. This incident, which investigators now dub the Coinbase Crypto Exploiter Heist, involved the siphoning of $15.9 million in suspicious withdrawals, leaving the crypto world shaken.
$16M Vanishes from Coinbase Commerce
The Coinbase Crypto Exploiter Heist came to light in April 2024 when blockchain sleuth ZachXBT revealed that a flaw in a Coinbase Commerce contract allowed threat actors to drain nearly $16 million. The exploitation occurred over 1,700 transactions on the Polygon layer-2 scaling network.
According to ZachXBT, “The funds were bridged from Polygon to Ethereum and then scattered across multiple wallet addresses to obfuscate their trail—a classic strategy among crypto thieves.”
The stolen funds, primarily in USDC, remained mostly dormant. However, investigators tracked a portion of the assets being funneled into platforms like eXch and Stake, a crypto gambling service.
Social Media Bragging
In a bizarre twist, the Coinbase Crypto Exploiter Heist took on a theatrical dimension in May 2024. A Telegram user operating under the alias “tezedasads12” claimed ownership of a wallet containing $6 million from the exploit. The same individual admitted to managing the Instagram account “Excite,” where they showcased a lavish lifestyle allegedly funded by the stolen wealth.
Images posted on Instagram depicted the scammer posing with luxury watches and an actual monkey, with one post hinting that the purchases were made in Denmark.
“This isn’t the first time we’ve seen criminals use social media to brag about their crimes, but this case stands out for its audacity,” commented ZachXBT on X (formerly Twitter). “Excite’s attempts to flaunt their wealth could help authorities track them down.”
A Growing Pattern
The Coinbase Crypto Exploiter Heist isn’t an isolated incident. ZachXBT has uncovered multiple Coinbase-related thefts in recent months, each pointing to vulnerabilities that threat actors are quick to exploit.
In November, ZachXBT exposed a theft of $6.5 million from a Coinbase user. The suspected perpetrator, Ronald Spektor, deactivated his social media accounts following the revelation, leading to speculation about his involvement.
ZachXBT’s investigations also played a pivotal role in recovering stolen funds. In one instance, he helped a senior citizen recover $275,000 in Bitcoin after falling victim to Indian impersonators posing as Coinbase support agents.
The most significant case linked to Coinbase involved a $238 million crypto heist. Fake Coinbase support agents scammed a Genesis creditor out of 4,064 BTC. ZachXBT’s investigation contributed to arrests in the case, showcasing his crucial role in tracking crypto crimes.
Industry Reaction
The Coinbase Crypto Exploiter Heist has ignited conversations across the crypto industry about the need for stronger security measures on decentralized platforms.
“Exploits like this erode trust in the broader crypto ecosystem,” said cybersecurity expert Marcus Levin. “While platforms like Coinbase have made strides in user protection, incidents like these highlight the vulnerabilities that still exist.”
Others point to the importance of on-chain investigators like ZachXBT. “Without these independent sleuths, many of these crimes would remain unsolved,” said blockchain analyst Tara Simmons. “ZachXBT’s work proves that blockchain transparency can be a powerful tool in holding criminals accountable.”
The Road Ahead
While the stolen funds from the Coinbase Crypto Exploiter Heist remain largely untouched, the case highlights an ongoing challenge for the crypto community: balancing innovation with robust security.
Coinbase has yet to release an official statement on the exploit, but experts believe that improved contract auditing and user education could help prevent similar incidents. Meanwhile, ZachXBT continues to monitor the wallets associated with the heist, holding out hope that the funds can be recovered.
“This isn’t just about the money,” ZachXBT emphasized. “It’s about protecting the integrity of decentralized finance and ensuring that users feel safe in this space.”
Get more from The Bit Gazette
