Coinbase Commerce seed phrase page alarms security community ahead of March 31 shutdown

cryptonews03-19

Coinbase Commerce’s seed phrase withdrawal page is drawing fierce criticism from security researchers, who warn it normalizes typing 12-word recovery phrases into a website just days before the March ...

Source Link

Disclaimer: Investing carries risk. This is not financial advice. The above content should not be regarded as an offer, recommendation, or solicitation on acquiring or disposing of any financial products, any associated discussions, comments, or posts by author or other users should not be considered as such either. It is solely for general information purpose only, which does not consider your own investment objectives, financial situations or needs. TTM assumes no responsibility or warranty for the accuracy and completeness of the information, investors should do their own research and may seek professional advice before investing.

Comments

We need your insight to fill this gap

Leave a comment

{"i18n":{"language":"en_US"},"isChannel":false,"data":{"share":"https://ttm.financial/m/news/2620212252?lang=en_US&edition=fundamental","thumbnail":"","is_english":true,"pubTime":"2026-03-19 22:59","share_image_url":"https://static.laohu8.com/e9f99090a1c2ed51c021029395664489","id":"2620212252","market":"hk","top_or_hot":-1,"title":"Coinbase Commerce seed phrase page alarms security community ahead of March 31 shutdown","media":"cryptonews","content":"<div>\n<p>Coinbase Commerce’s seed phrase withdrawal page is drawing fierce criticism from security researchers, who warn it normalizes typing 12-word recovery phrases into a website just days before the March ...</p>\n\n<a href=\"https://crypto.news/coinbase-commerce-seed-phrase-page-alarms-security-community-ahead-of-march-31-shutdown/\">Source Link</a>\n\n</div>\n","source":"crypto_news_highlight","html":"<!DOCTYPE html>\n<html>\n<head>\n<meta http-equiv=\"Content-Type\" content=\"text/html; charset=utf-8\" />\n<meta name=\"viewport\" content=\"width=device-width,initial-scale=1.0,minimum-scale=1.0,maximum-scale=1.0,user-scalable=no\"/>\n<meta name=\"format-detection\" content=\"telephone=no,email=no,address=no\" />\n<title>Coinbase Commerce seed phrase page alarms security community ahead of March 31 shutdown</title>\n<style type=\"text/css\">\na,abbr,acronym,address,applet,article,aside,audio,b,big,blockquote,body,canvas,caption,center,cite,code,dd,del,details,dfn,div,dl,dt,\nem,embed,fieldset,figcaption,figure,footer,form,h1,h2,h3,h4,h5,h6,header,hgroup,html,i,iframe,img,ins,kbd,label,legend,li,mark,menu,nav,\nobject,ol,output,p,pre,q,ruby,s,samp,section,small,span,strike,strong,sub,summary,sup,table,tbody,td,tfoot,th,thead,time,tr,tt,u,ul,var,video{ font:inherit;margin:0;padding:0;vertical-align:baseline;border:0 }\nbody{ font-size:16px; line-height:1.5; color:#999; background:transparent; }\n.wrapper{ overflow:hidden;word-break:break-all;padding:10px; }\nh1,h2{ font-weight:normal; line-height:1.35; margin-bottom:.6em; }\nh3,h4,h5,h6{ line-height:1.35; margin-bottom:1em; }\nh1{ font-size:24px; }\nh2{ font-size:20px; }\nh3{ font-size:18px; }\nh4{ font-size:16px; }\nh5{ font-size:14px; }\nh6{ font-size:12px; }\np,ul,ol,blockquote,dl,table{ margin:1.2em 0; }\nul,ol{ margin-left:2em; }\nul{ list-style:disc; }\nol{ list-style:decimal; }\nli,li p{ margin:10px 0;}\nimg{ max-width:100%;display:block;margin:0 auto 1em; }\nblockquote{ color:#B5B2B1; border-left:3px solid #aaa; padding:1em; }\nstrong,b{font-weight:bold;}\nem,i{font-style:italic;}\ntable{ width:100%;border-collapse:collapse;border-spacing:1px;margin:1em 0;font-size:.9em; }\nth,td{ padding:5px;text-align:left;border:1px solid #aaa; }\nth{ font-weight:bold;background:#5d5d5d; }\n.symbol-link{font-weight:bold;}\n/* header{ border-bottom:1px solid #494756; } */\n.title{ margin:0 0 8px;line-height:1.3;color:#ddd; }\n.meta {color:#5e5c6d;font-size:13px;margin:0 0 .5em; }\na{text-decoration:none; color:#2a4b87;}\n.meta .head { display: inline-block; overflow: hidden}\n.head .h-thumb { width: 30px; height: 30px; margin: 0; padding: 0; border-radius: 50%; float: left;}\n.head .h-content { margin: 0; padding: 0 0 0 9px; float: left;}\n.head .h-name {font-size: 13px; color: #eee; margin: 0;}\n.head .h-time {font-size: 11px; color: #7E829C; margin: 0;line-height: 11px;}\n.small {font-size: 12.5px; display: inline-block; transform: scale(0.9); -webkit-transform: scale(0.9); transform-origin: left; -webkit-transform-origin: left;}\n.smaller {font-size: 12.5px; display: inline-block; transform: scale(0.8); -webkit-transform: scale(0.8); transform-origin: left; -webkit-transform-origin: left;}\n.bt-text {font-size: 12px;margin: 1.5em 0 0 0}\n.bt-text p {margin: 0}\n</style>\n</head>\n<body>\n<div class=\"wrapper\">\n<header>\n<h2 class=\"title\">\nCoinbase Commerce seed phrase page alarms security community ahead of March 31 shutdown\n</h2>\n\n<h4 class=\"meta\">\n\n\n2026-03-19 22:59 GMT+8&nbsp;&nbsp;&nbsp;<a href=https://crypto.news/coinbase-commerce-seed-phrase-page-alarms-security-community-ahead-of-march-31-shutdown/><strong>cryptonews</strong></a>\n\n\n</h4>\n\n</header>\n<article>\n<div>\n<p>Coinbase Commerce’s seed phrase withdrawal page is drawing fierce criticism from security researchers, who warn it normalizes typing 12-word recovery phrases into a website just days before the March ...</p>\n\n<a href=\"https://crypto.news/coinbase-commerce-seed-phrase-page-alarms-security-community-ahead-of-march-31-shutdown/\">Source Link</a>\n\n</div>\n\n\n</article>\n</div>\n</body>\n</html>\n","isBrief":false,"type":0,"news_type":1,"symbol":"BK4595","symbol_name":"比特币概念","start_time":0,"source_url":"https://crypto.news/coinbase-commerce-seed-phrase-page-alarms-security-community-ahead-of-march-31-shutdown/","article_id":"2620212252","we_media_id":null,"thumbnails":[],"rights":{"source":"crypto_news_highlight","url":"https://crypto.news/coinbase-commerce-seed-phrase-page-alarms-security-community-ahead-of-march-31-shutdown/","rn_cache_url":null,"directOrigin":true},"url":"https://stock-news.laohu8.com/highlight/detail?id=2620212252","pubTimestamp":1773932384,"columns":[],"sourceInfo":{"source_id":"crypto_news_highlight","name":"Crypto News"},"weMediaInfo":null,"summary":"Coinbase Commerce’s seed phrase withdrawal page is drawing fierce criticism from security researchers, who warn it normalizes typing 12-word recovery phrases into a website just days before the March 31 shutdown deadline.SlowMist’s Cos, CISO 23pds and on-chain sleuth ZachXBT say the page and its cloneable front end create a powerful phishing template, especially as Commerce is wound down into Coinbase Business by March 31, 2026.The fundamental problem is one of normalisation. Every legitimate security protocol in the cryptocurrency industry is built on a single, non-negotiable principle: a seed phrase should never be entered into any website, form, or app under any circumstances — not even an official one. Seed phrases are","collect":0,"end_time":0,"defaultTopTitle":"crypto.news","property":[],"viewcount":null,"language":"en","relate_stocks":{"BK4595":"比特币概念","COIN":"Coinbase Global, Inc.","BK4551":"寇图资本持仓","LU1861559042.SGD":"日兴方舟颠覆性创新基金B SGD","BK4539":"次新股","COYY":"GRANITESHARES YIELDBOOST COIN ETF","CONI":"2倍做空COIN ETF-GraniteShares","BK4554":"元宇宙及AR概念","LU2360107671.USD":"BGF FINTECH \"A4\" (USD) INC","COIA":"ProShares Ultra Coin ETF","COIG":"2倍做多COIN ETF- Leverage Shares","CONX":"Direxion Daily COIN Bull 2X ETF","BK4585":"ETF&股票定投概念","COII":"REX COIN Growth& Income ETF","ICOI":"Bitwise COIN Option Income Strategy ETF","CONY":"COIN期权收益策略ETF-YieldMax","COIO":"2倍上限加速COIN ETF-Leverage Shares","LU1861558580.USD":"日兴方舟颠覆性创新基金B","COIW":"COIN周配息ETF-Roundhill","BK4516":"特朗普概念","LU1861217088.USD":"贝莱德金融科技A2","BK4535":"淡马锡持仓","BK4596":"哈里斯概念","LU1861220207.SGD":"Blackrock FinTech A2 SGD-H","FIAT":"做空COIN期权收益策略ETF-YieldMax","BK4588":"碎股","BK4600":"加密货币概念","BK4112":"金融交易所和数据"},"translate_title":"Coinbase Commerce种子短语页面在3月31日关闭前向安全社区发出警报","themeId":null,"isJumpTheme":false,"ttsUrl":null,"symbols_score_info":{"ICOI":0.6,"COIN":1.95,"COIA":0.6,"COII":0.6,"COIG":0.6,"FIAT":0.6,"COYY":0.6,"CONI":0.6,"COIO":0.6,"CONY":0.6,"COIW":0.6,"CONX":0.6},"content_text":"Coinbase Commerce’s seed phrase withdrawal page is drawing fierce criticism from security researchers, who warn it normalizes typing 12-word recovery phrases into a website just days before the March 31 shutdown deadline.\n\n\nSummary\n\n\n\nA Coinbase Commerce subdomain at withdraw.commerce.coinbase.com/seed-phrase asks merchants to type 12-word seed phrases into a plain-text web form to recover funds.\nSlowMist’s Cos, CISO 23pds and on-chain sleuth ZachXBT say the page and its cloneable front end create a powerful phishing template, especially as Commerce is wound down into Coinbase Business by March 31, 2026.\nCritics argue the flow trains users to ignore the industry rule to never enter a seed phrase online, reviving fears after earlier Coinbase impersonation scams stole about $2 million from users.\n\n\n\nA subdomain page belonging to Coinbase Commerce — the company’s merchant payments product — has drawn sharp criticism from leading blockchain security researchers after it was found to be prompting users to enter their 12-word seed phrases, also known as mnemonic or recovery phrases, directly into a web form in plain text. The controversy erupted on Wednesday and intensified Thursday morning, with the discovery coming at a particularly sensitive moment: Coinbase is winding down Commerce entirely by March 31, 2026, as part of a broader platform consolidation under Coinbase Business — meaning tens of thousands of merchants have a narrow window to withdraw their funds.\nThe page in question, hosted at withdraw.commerce.coinbase.com/seed-phrase, was referenced in a now-deleted Coinbase Commerce help document that directed users to recover funds by importing their recovery phrases into compatible wallets such as Coinbase Wallet or MetaMask. SlowMist founder Yu Xian (known online as Cos) described the practice as demonstrating an “unbelievable lack of security awareness” from a major industry player, having received multiple user reports about the page. On-chain investigator ZachXBT independently flagged the page, warning that its existence creates a direct attack surface for social engineering campaigns targeting Coinbase users.\nA Cloneable Attack Vector on an Official Domain\nThe concerns go beyond the page itself. SlowMist’s Chief Information Security Officer, known as 23pds, escalated the alarm by pointing out that the page’s sitemap contains structural flaws that make it trivially easy for malicious actors to replicate. Using tools such as ResourcesSaver, attackers can download the front-end code and deploy visually identical phishing sites — particularly dangerous when combined with Coinbase-lookalike domains that could credibly deceive even experienced users.\nThe fundamental problem is one of normalisation. Every legitimate security protocol in the cryptocurrency industry is built on a single, non-negotiable principle: a seed phrase should never be entered into any website, form, or app under any circumstances — not even an official one. Seed phrases are the master cryptographic keys to a wallet; whoever possesses them owns the funds. By building a recovery workflow that requires users to type their phrase into a browser, Coinbase has — whether intentionally or through oversight — trained users to accept a behaviour that scammers routinely exploit. Coinfomania noted that the tool even suggests copying phrases from Google Drive as an intermediate step, compounding the risk.\nZachXBT’s warning carries particular weight given his track record. In January 2026, he exposed a Coinbase support impersonation scam that resulted in approximately $2 million in stolen crypto — a scheme that relied on users being conditioned to trust Coinbase-branded interfaces. The Commerce seed phrase page represents a ready-made template for a follow-up attack of potentially far greater scale.\nAs of Thursday, Coinbase had not publicly responded to the criticism, despite multiple requests for comment. The company has offered alternative withdrawal methods — including a separate commerce withdrawal tool considered safer by researchers — but has not removed or modified the seed phrase page. With twelve days remaining until Commerce is permanently disabled, the pressure on the exchange to act is mounting rapidly. For the crypto industry’s most prominent publicly listed company, the reputational stakes of a mass phishing event triggered by its own migration tooling could scarcely be higher.\n\n\n\n\n\n                Read more:\n            \n\n                Bitcoin slips below $71k as Powell and Iran oil shock hit crypto","kind":"highlight","is_publish_news":true,"is_publish_highlight":false,"is_publish_live":false,"is_publish_wemedia":null,"editions":null,"column":"","sentiment":"0","news_tag":"","news_rank":0,"symbols":[],"gpt_button":0,"need_auth":false,"code":"91000000","status":"200"},"commentList":[],"isCommentEnd":true,"newsSizeData":{"likeSize":0,"commentSize":0,"repostSize":0,"favoriteSize":0,"likeStatus":false,"favoriteStatus":false},"APP":{"userAgent":"Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)","isDev":false,"isTTM":true,"tenantId":"TBGLOBAL","deviceId":"web-server-community-laohu8-v3","version":"4.37.0","shortVersion":"4.37.0","platform":"web","vendor":"web","appName":"ttm","isIOS":false,"isAndroid":false,"isTiger":false,"isTHS":false,"isWeiXin":false,"isWeiXinMini":false,"isWeiBo":false,"isQQ":false,"isBaiduSwan":false,"isBaiduBox":false,"isDingTalk":false,"isToutiao":false,"isOnePlus":false,"isHuaWei":false,"isXiaomi":false,"isXiaomiWebView":false,"isOppo":false,"isVivo":false,"isSamsung":false,"isMobile":false},"href":"/m/news/2620212252","isCrawlerRequest":true}