Coinbase

Coinbase is listed on the Nasdaq, and that is the strongest single thing about it. A public listing means audited financial statements, quarterly filings, a board, and disclosure obligations enforced by somebody other than the company's own marketing department. In an industry where most platforms publish nothing verifiable at all, being able to read the accounts is not a small advantage.

It is also how we know the most important thing about keeping crypto there, because Coinbase disclosed it themselves. A quarterly filing noted that in the event of bankruptcy, crypto held on behalf of customers could be treated as part of the bankruptcy estate, and those customers could be treated as general unsecured creditors. That is not a prediction that Coinbase will fail, and its executives were quick to say the risk of that was remote. It is something more useful than a prediction: a legal description of what custody actually is, written by the custodian, under penalty of securities law. Every custodial exchange has this property. Coinbase is unusual in having written it down.

In May 2025 attackers bribed overseas support agents at a third-party contractor and walked out with customer data. Around 70,000 people were affected. The stolen material included names, contact details, partial social security numbers, masked bank details and identity document images — but no passwords, no private keys and no funds. Coinbase refused a $20 million extortion demand, disclosed the incident, and estimated the cost of putting it right at between $180 million and $400 million.

No money was taken in that breach, and that is not the end of the story. What the attackers obtained is a list of people confirmed to hold crypto, with enough personal detail to sound convincing on the phone. The losses that follow an incident like this do not come from the breach; they come from the call three weeks later from someone who knows your name, your address and the last four digits of your bank account, telling you your account has been compromised and that you need to move your funds to a "secure wallet" they will help you set up. That call is the attack. Coinbase will never phone you and ask you to move funds anywhere, and no legitimate company ever will. If it matters, hang up and contact them yourself through the app.

Buy on Advanced Trade rather than the simple screen. The one-click purchase flow charges a spread and a fee that together can take several percent out of a small buy; the same purchase placed as a market order on Advanced Trade costs a fraction of it. Same account, same coins, different button.

And what you hold there is a claim, not a coin. Coinbase is a reasonable place to convert money into crypto, and a reasonable place to leave an amount you are actively trading. It is not where a long-term holding belongs, for exactly the reason its own filing describes. When a balance grows past what you would be relaxed about losing, move it somewhere you hold the keys — what a wallet actually is covers what that means in practice.