Slowmist CISO: Coinbase Commerce Asset Recovery Page Sitemap Also Has Vulnerabilities with Phishing Attack Risks

MarsBitNews · 2026-03-19T03:55:28+00:00

Mars Finance News: After Slowmist founder余弦 disclosed that the Coinbase Commerce asset recovery page directly requests users to input plaintext seed phrases, posing security risks, Slowmist Chief Information Security Officer 23pds further stated that the site map of this page also has flaws. Malicious attackers can easily use tools like ResourcesSaver to download front-end code and deploy similar websites. If combined with domain names similar to Coinbase for phishing attacks, users can easily be deceived.

MarsBitNews

2026-03-19 03:55:28

Mars Finance reports that after SlowMist founder Yu Xian disclosed the risk of directly asking users to input plaintext seed phrases on the Coinbase Commerce asset recovery page, SlowMist Chief Information Security Officer 23pds added that the site’s sitemap also has vulnerabilities. Malicious attackers can easily use tools like ResourcesSaver to download the frontend code and deploy similar websites. If combined with similar domains like Coinbase, it could be used for phishing attacks, making users easily fall victim.

View Original

This page may contain third-party content, which is provided for information purposes only (not representations/warranties) and should not be considered as an endorsement of its views by Gate, nor as financial or professional advice. See Disclaimer for details.