In July, a hacker responsible for one of the largest data breaches in Coinbase‘s history purchased Ethereum (ETH) 
$2,261 for the second time, causing over $300 million in damages. The blockchain analytics platform Lookonchain reported that the wallet labeled as the Coinbase hacker acquired 649.62 ETH for $2.31 million within just 12 hours at an average price of $3,561 per ETH. Earlier that month, the same wallet had bought 4,863 ETH for $12.55 million at an average price of $2,581 each. Following a sale of 26,762 ETH in May for $69.25 million, the hacker began accumulating Ethereum aggressively amid the rising prices.
Growing Ethereum Acquisitions by the Hacker
With these July purchases, the hacker’s wallet captured significant profit potential as ETH’s price surpassed $3,700 for the first time this year. The portfolio, built at an average cost of $2,600, turned into millions of dollars in unrealized gains with a 40% increase in Ethereum’s value over the past month.
Blockchain data reveals that most transactions were conducted via the CoW Protocol, enabling the hacker to reduce visibility and minimize price slippage. The strategy has been interpreted as a calculated shift back to Ethereum once market trends reversed after large May sales. This rapid accumulation aligns with bullish expectations for ETH, while blockchain investigators continue to monitor wallet movements closely. The timing for realizing total balances or potential new purchases remains uncertain.
Security Flaw Behind the Attack on Coinbase
The attack started with Coinbase’s overseas call center employees being bribed to leak customer data. The hacker couldn’t directly access passwords or crypto balances, yet the exposure of sensitive information led to inquiries and incurred costs for improvements. Even though the impact on users was minimal, this incident cast doubt on the platform’s security practices.
Coinbase refused to negotiate with the hacker, promising to fully compensate affected customers. However, the movements of funds following the hack suggest that the leaked data was indirectly converted into profit. Through Ethereum-focused maneuvers, the hacker broadens their operational scope, exploiting blockchain privacy techniques and taking advantage of the rising market.
