Coinbase Commerce seed phrase page alarms security community ahead of March 31 shutdown

cryptonews

Yesterday

Coinbase Commerce’s seed phrase withdrawal page is drawing fierce criticism from security researchers, who warn it normalizes typing 12-word recovery phrases into a website just days before the March ...

Source Link

Disclaimer: Investing carries risk. This is not financial advice. The above content should not be regarded as an offer, recommendation, or solicitation on acquiring or disposing of any financial products, any associated discussions, comments, or posts by author or other users should not be considered as such either. It is solely for general information purpose only, which does not consider your own investment objectives, financial situations or needs. TTM assumes no responsibility or warranty for the accuracy and completeness of the information, investors should do their own research and may seek professional advice before investing.

Most Discussed

{"basename":"","ssrTDKData":{"titleTemplate":"%s - Tiger Brokers","title":"Tiger Brokers | Global Stocks, Options & Futures Trading App","description":"Tiger Brokers, one-stop investment in US stocks, SGX stocks, HK stocks, A-shares & other global assets. One of the best stock trading platforms in Singapore.","keywords":"tiger brokers,tiger trade,tiger brokers singapore,broker online,stock trading in singapore,share trading singapore,brokerage firm singapore,trading app,stock broker singapore,stock trading platforms,trading account","social":{"ogDescription":"Tiger Brokers, one-stop investment in US stocks, SGX stocks, HK stocks, A-shares & other global assets. One of the best stock trading platforms in Singapore.","ogImage":"https://c1.itigergrowtha.com/portal5/static/media/og-logo.be62fbe1.png","ogUrl":"https://www-web.itiger.com/news/2620212252"},"companyName":"Tiger Brokers"},"pageData":{"isMobile":false,"isTiger":false,"isTTM":true,"region":"SGP","license":"TBSG","edition":"fundamental"},"isCrawlerRequest":true,"__swrFallback__":{"@#url:\"https://stock-news.skytigris.cn/v3/news\",params:#id:\"2620212252\",edition:\"fundamental\",auth_exemption:1,,,undefined,":{"share":"https://ttm.financial/m/news/2620212252?lang=en_US&edition=fundamental","thumbnail":"","is_english":true,"pubTime":"2026-03-19 22:59","share_image_url":"https://static.laohu8.com/e9f99090a1c2ed51c021029395664489","id":"2620212252","market":"other","top_or_hot":-1,"title":"Coinbase Commerce seed phrase page alarms security community ahead of March 31 shutdown","media":"cryptonews","content":"<div>\n<p>Coinbase Commerce’s seed phrase withdrawal page is drawing fierce criticism from security researchers, who warn it normalizes typing 12-word recovery phrases into a website just days before the March ...</p>\n\n<a href=\"https://crypto.news/coinbase-commerce-seed-phrase-page-alarms-security-community-ahead-of-march-31-shutdown/\">Source Link</a>\n\n</div>\n","source":"crypto_news_highlight","html":"<!DOCTYPE html>\n<html>\n<head>\n<meta http-equiv=\"Content-Type\" content=\"text/html; charset=utf-8\" />\n<meta name=\"viewport\" content=\"width=device-width,initial-scale=1.0,minimum-scale=1.0,maximum-scale=1.0,user-scalable=no\"/>\n<meta name=\"format-detection\" content=\"telephone=no,email=no,address=no\" />\n<title>Coinbase Commerce seed phrase page alarms security community ahead of March 31 shutdown</title>\n<style type=\"text/css\">\na,abbr,acronym,address,applet,article,aside,audio,b,big,blockquote,body,canvas,caption,center,cite,code,dd,del,details,dfn,div,dl,dt,\nem,embed,fieldset,figcaption,figure,footer,form,h1,h2,h3,h4,h5,h6,header,hgroup,html,i,iframe,img,ins,kbd,label,legend,li,mark,menu,nav,\nobject,ol,output,p,pre,q,ruby,s,samp,section,small,span,strike,strong,sub,summary,sup,table,tbody,td,tfoot,th,thead,time,tr,tt,u,ul,var,video{ font:inherit;margin:0;padding:0;vertical-align:baseline;border:0 }\nbody{ font-size:16px; line-height:1.5; color:#999; background:transparent; }\n.wrapper{ overflow:hidden;word-break:break-all;padding:10px; }\nh1,h2{ font-weight:normal; line-height:1.35; margin-bottom:.6em; }\nh3,h4,h5,h6{ line-height:1.35; margin-bottom:1em; }\nh1{ font-size:24px; }\nh2{ font-size:20px; }\nh3{ font-size:18px; }\nh4{ font-size:16px; }\nh5{ font-size:14px; }\nh6{ font-size:12px; }\np,ul,ol,blockquote,dl,table{ margin:1.2em 0; }\nul,ol{ margin-left:2em; }\nul{ list-style:disc; }\nol{ list-style:decimal; }\nli,li p{ margin:10px 0;}\nimg{ max-width:100%;display:block;margin:0 auto 1em; }\nblockquote{ color:#B5B2B1; border-left:3px solid #aaa; padding:1em; }\nstrong,b{font-weight:bold;}\nem,i{font-style:italic;}\ntable{ width:100%;border-collapse:collapse;border-spacing:1px;margin:1em 0;font-size:.9em; }\nth,td{ padding:5px;text-align:left;border:1px solid #aaa; }\nth{ font-weight:bold;background:#5d5d5d; }\n.symbol-link{font-weight:bold;}\n/* header{ border-bottom:1px solid #494756; } */\n.title{ margin:0 0 8px;line-height:1.3;color:#ddd; }\n.meta {color:#5e5c6d;font-size:13px;margin:0 0 .5em; }\na{text-decoration:none; color:#2a4b87;}\n.meta .head { display: inline-block; overflow: hidden}\n.head .h-thumb { width: 30px; height: 30px; margin: 0; padding: 0; border-radius: 50%; float: left;}\n.head .h-content { margin: 0; padding: 0 0 0 9px; float: left;}\n.head .h-name {font-size: 13px; color: #eee; margin: 0;}\n.head .h-time {font-size: 11px; color: #7E829C; margin: 0;line-height: 11px;}\n.small {font-size: 12.5px; display: inline-block; transform: scale(0.9); -webkit-transform: scale(0.9); transform-origin: left; -webkit-transform-origin: left;}\n.smaller {font-size: 12.5px; display: inline-block; transform: scale(0.8); -webkit-transform: scale(0.8); transform-origin: left; -webkit-transform-origin: left;}\n.bt-text {font-size: 12px;margin: 1.5em 0 0 0}\n.bt-text p {margin: 0}\n</style>\n</head>\n<body>\n<div class=\"wrapper\">\n<header>\n<h2 class=\"title\">\nCoinbase Commerce seed phrase page alarms security community ahead of March 31 shutdown\n</h2>\n\n<h4 class=\"meta\">\n\n\n2026-03-19 22:59 GMT+8&nbsp;&nbsp;&nbsp;<a href=https://crypto.news/coinbase-commerce-seed-phrase-page-alarms-security-community-ahead-of-march-31-shutdown/><strong>cryptonews</strong></a>\n\n\n</h4>\n\n</header>\n<article>\n<div>\n<p>Coinbase Commerce’s seed phrase withdrawal page is drawing fierce criticism from security researchers, who warn it normalizes typing 12-word recovery phrases into a website just days before the March ...</p>\n\n<a href=\"https://crypto.news/coinbase-commerce-seed-phrase-page-alarms-security-community-ahead-of-march-31-shutdown/\">Source Link</a>\n\n</div>\n\n\n</article>\n</div>\n</body>\n</html>\n","isBrief":false,"type":0,"news_type":1,"symbol":"LU1861220207.SGD","symbol_name":"Blackrock FinTech A2 SGD-H","start_time":0,"source_url":"https://crypto.news/coinbase-commerce-seed-phrase-page-alarms-security-community-ahead-of-march-31-shutdown/","article_id":"2620212252","we_media_id":null,"thumbnails":[],"rights":{"source":"crypto_news_highlight","url":"https://crypto.news/coinbase-commerce-seed-phrase-page-alarms-security-community-ahead-of-march-31-shutdown/","rn_cache_url":null,"directOrigin":true},"url":"https://stock-news.laohu8.com/highlight/detail?id=2620212252","pubTimestamp":1773932384,"columns":[],"sourceInfo":{"source_id":"crypto_news_highlight","name":"Crypto News"},"weMediaInfo":null,"summary":"Coinbase Commerce’s seed phrase withdrawal page is drawing fierce criticism from security researchers, who warn it normalizes typing 12-word recovery phrases into a website just days before the March 31 shutdown deadline.SlowMist’s Cos, CISO 23pds and on-chain sleuth ZachXBT say the page and its cloneable front end create a powerful phishing template, especially as Commerce is wound down into Coinbase Business by March 31, 2026.The fundamental problem is one of normalisation. Every legitimate security protocol in the cryptocurrency industry is built on a single, non-negotiable principle: a seed phrase should never be entered into any website, form, or app under any circumstances — not even an official one. Seed phrases are","collect":0,"end_time":0,"defaultTopTitle":"crypto.news","property":[],"viewcount":null,"language":"en","relate_stocks":{"LU1861220207.SGD":"Blackrock FinTech A2 SGD-H","BK4516":"特朗普概念","COYY":"GRANITESHARES YIELDBOOST COIN ETF","BK4535":"淡马锡持仓","CONI":"2倍做空COIN ETF-GraniteShares","COIA":"ProShares Ultra Coin ETF","BK4596":"哈里斯概念","LU2360107671.USD":"BGF FINTECH \"A4\" (USD) INC","BK4600":"加密货币概念","COIG":"2倍做多COIN ETF- Leverage Shares","BK4588":"碎股","CONX":"Direxion Daily COIN Bull 2X ETF","LU1861559042.SGD":"日兴方舟颠覆性创新基金B SGD","BK4112":"金融交易所和数据","COII":"REX COIN Growth& Income ETF","CONY":"COIN期权收益策略ETF-YieldMax","BK4595":"比特币概念","BK4551":"寇图资本持仓","COIO":"2倍上限加速COIN ETF-Leverage Shares","ICOI":"Bitwise COIN Option Income Strategy ETF","BK4539":"次新股","COIW":"COIN周配息ETF-Roundhill","COIN":"Coinbase Global, Inc.","BK4554":"元宇宙及AR概念","FIAT":"做空COIN期权收益策略ETF-YieldMax","BK4585":"ETF&股票定投概念","LU1861558580.USD":"日兴方舟颠覆性创新基金B","LU1861217088.USD":"贝莱德金融科技A2"},"translate_title":"Coinbase Commerce种子短语页面在3月31日关闭前向安全社区发出警报","themeId":null,"isJumpTheme":false,"ttsUrl":null,"symbols_score_info":{"COIN":1.95,"COYY":0.6,"ICOI":0.6,"CONY":0.6,"COIG":0.6,"COIA":0.6,"COIW":0.6,"CONX":0.6,"COII":0.6,"COIO":0.6,"FIAT":0.6,"CONI":0.6},"content_text":"Coinbase Commerce’s seed phrase withdrawal page is drawing fierce criticism from security researchers, who warn it normalizes typing 12-word recovery phrases into a website just days before the March 31 shutdown deadline.\n\n\nSummary\n\n\n\nA Coinbase Commerce subdomain at withdraw.commerce.coinbase.com/seed-phrase asks merchants to type 12-word seed phrases into a plain-text web form to recover funds.\nSlowMist’s Cos, CISO 23pds and on-chain sleuth ZachXBT say the page and its cloneable front end create a powerful phishing template, especially as Commerce is wound down into Coinbase Business by March 31, 2026.\nCritics argue the flow trains users to ignore the industry rule to never enter a seed phrase online, reviving fears after earlier Coinbase impersonation scams stole about $2 million from users.\n\n\n\nA subdomain page belonging to Coinbase Commerce — the company’s merchant payments product — has drawn sharp criticism from leading blockchain security researchers after it was found to be prompting users to enter their 12-word seed phrases, also known as mnemonic or recovery phrases, directly into a web form in plain text. The controversy erupted on Wednesday and intensified Thursday morning, with the discovery coming at a particularly sensitive moment: Coinbase is winding down Commerce entirely by March 31, 2026, as part of a broader platform consolidation under Coinbase Business — meaning tens of thousands of merchants have a narrow window to withdraw their funds.\nThe page in question, hosted at withdraw.commerce.coinbase.com/seed-phrase, was referenced in a now-deleted Coinbase Commerce help document that directed users to recover funds by importing their recovery phrases into compatible wallets such as Coinbase Wallet or MetaMask. SlowMist founder Yu Xian (known online as Cos) described the practice as demonstrating an “unbelievable lack of security awareness” from a major industry player, having received multiple user reports about the page. On-chain investigator ZachXBT independently flagged the page, warning that its existence creates a direct attack surface for social engineering campaigns targeting Coinbase users.\nA Cloneable Attack Vector on an Official Domain\nThe concerns go beyond the page itself. SlowMist’s Chief Information Security Officer, known as 23pds, escalated the alarm by pointing out that the page’s sitemap contains structural flaws that make it trivially easy for malicious actors to replicate. Using tools such as ResourcesSaver, attackers can download the front-end code and deploy visually identical phishing sites — particularly dangerous when combined with Coinbase-lookalike domains that could credibly deceive even experienced users.\nThe fundamental problem is one of normalisation. Every legitimate security protocol in the cryptocurrency industry is built on a single, non-negotiable principle: a seed phrase should never be entered into any website, form, or app under any circumstances — not even an official one. Seed phrases are the master cryptographic keys to a wallet; whoever possesses them owns the funds. By building a recovery workflow that requires users to type their phrase into a browser, Coinbase has — whether intentionally or through oversight — trained users to accept a behaviour that scammers routinely exploit. Coinfomania noted that the tool even suggests copying phrases from Google Drive as an intermediate step, compounding the risk.\nZachXBT’s warning carries particular weight given his track record. In January 2026, he exposed a Coinbase support impersonation scam that resulted in approximately $2 million in stolen crypto — a scheme that relied on users being conditioned to trust Coinbase-branded interfaces. The Commerce seed phrase page represents a ready-made template for a follow-up attack of potentially far greater scale.\nAs of Thursday, Coinbase had not publicly responded to the criticism, despite multiple requests for comment. The company has offered alternative withdrawal methods — including a separate commerce withdrawal tool considered safer by researchers — but has not removed or modified the seed phrase page. With twelve days remaining until Commerce is permanently disabled, the pressure on the exchange to act is mounting rapidly. For the crypto industry’s most prominent publicly listed company, the reputational stakes of a mass phishing event triggered by its own migration tooling could scarcely be higher.\n\n\n\n\n\n                Read more:\n            \n\n                Bitcoin slips below $71k as Powell and Iran oil shock hit crypto","kind":"highlight","is_publish_news":true,"is_publish_highlight":false,"is_publish_live":false,"is_publish_wemedia":null,"editions":null,"column":"","sentiment":"0","news_tag":"","news_rank":0,"symbols":[],"gpt_button":0,"need_auth":false,"code":"91000000","status":"200"}}}