Coinbase fixes 2FA log error making people think they were hacked

Coinbase fixed a logging bug that mislabeled failed password attempts as 2FA failures in account activity logs, which caused user confusion and could be leveraged in social engineering. The report highlights ongoing smishing and voice phishing campaigns impersonating Coinbase to steal credentials and 2FA tokens, and reiterates Coinbase’s guidance that it will not call or text customers to request password or 2FA resets.