Exchanges / Coinbase
30-second risk check: Coinbase
CoinbaseRisk Rating and Review
coinbase.com · Official site verified ↗Likely contracting entity: Coinbase Singapore Pte. Ltd.Major Payment Institution
Regional regulatory fit · Moderate Risk
Cexvia rates Coinbase Moderate Risk at 75/100.
For Singapore users, the mapped entity is Coinbase Singapore Pte. Ltd. under Major Payment Institution. Its strongest area is Corporate transparency; the main observed concern is Security & incident history.
Cexvia Exchange Risk Rating0 critical · 100 stronger evidence
Coinbase75Moderate Risk
Security52Asset & 76Regulato78Regulatory & legal standing78Corporate transparency88Asset & solvency transparency76Security & incident history52Operations & user protection79
Across five rated dimensions, Corporate transparency scores highest at 88/100, while Security & incident history scores lowest at 52/100.
- 01
Singapore users generally contract with Coinbase Singapore Pte. Ltd.
- 02
EEA MiCA services are provided by Coinbase Luxembourg S.A.
- 03
U.S. services are provided by Coinbase, Inc., with licence and product scope varying by state.
Selected: SG / Coinbase Singapore Pte. Ltd. · Verified 2026-07-27
Overall score75Moderate Risk
Dimensions covered5 / 5
Regional Legal Entity Map
The brand does not define the regulatory perimeter.
Coinbase serves Singapore, the European Economic Area and the United States through different legal entities. The company named in your account agreement determines the applicable licence and protection perimeter.
RegionContracting entityRegulatory recordScopeStatusChecked
What these records can establish
- Named legal entity and jurisdiction
- Permitted or registered activities
- Current public-record status at the verification date
What these records do not prove
- Protection against all asset loss
- Global coverage for every user or product
- Complete solvency or future regulatory status
Regulatory & legal standingComplete
78score / 100Weight 25% · Confidence 94%
Key entities in Singapore, Luxembourg and the United States are verifiable, but U.S. service scope still varies by state.
- 3 key legal entities
- SG / LU / US
- U.S. scope varies by state
Score contribution0.2 / 25
Why this score
Evidence highlights3 key legal entities · SG / LU / US · U.S. scope varies by state
Observed limitationKey entities in Singapore, Luxembourg and the United States are verifiable, but U.S. service scope still varies by state.
Missing or limited evidenceNo material publication gap recorded for this dimension.
0 source records · Reviewed 2026-07-27Corporate transparencyComplete
88score / 100Weight 15% · Confidence 95%
Coinbase is publicly listed and provides named leadership, SEC filings and audited financial disclosures; group-level entity boundaries still depend on region.
- Public company: NASDAQ
- SEC filings: ongoing
- Leadership: disclosed
Score contribution0.1 / 15
Why this score
Evidence highlightsPublic company: NASDAQ · SEC filings: ongoing · Leadership: disclosed
Observed limitationCoinbase is publicly listed and provides named leadership, SEC filings and audited financial disclosures; group-level entity boundaries still depend on region.
Missing or limited evidenceNo material publication gap recorded for this dimension.
1 source records · Reviewed 2026-07-27Asset & solvency transparencyPrimary evidence
76score / 100Weight 20% · Confidence 88%
As a public company, Coinbase reports customer assets and liabilities and says U.S. dollar cash is held 1:1; it does not publish one continuous on-chain reserve ratio.
- Regular SEC filings
- Customer USD cash held 1:1
- No single continuous on-chain ratio
Score contribution0.2 / 20
Why this score
Evidence highlightsRegular SEC filings · Customer USD cash held 1:1 · No single continuous on-chain ratio
Observed limitationAs a public company, Coinbase reports customer assets and liabilities and says U.S. dollar cash is held 1:1; it does not publish one continuous on-chain reserve ratio.
Missing or limited evidencePrimary evidence
2 source records · Reviewed 2026-07-27Security & incident historyComplete
52score / 100Weight 15% · Confidence 92%
Coinbase disclosed a major customer-data theft incident in 2025 and customer reimbursements; it did not classify the event as a compromise of platform private keys.
- 2025 customer-data incident
- Reimbursement costs disclosed
- No direct platform private-key theft reported
Score contribution0.1 / 15
Why this score
Evidence highlights2025 customer-data incident · Reimbursement costs disclosed · No direct platform private-key theft reported
Observed limitationCoinbase disclosed a major customer-data theft incident in 2025 and customer reimbursements; it did not classify the event as a compromise of platform private keys.
Missing or limited evidenceNo material publication gap recorded for this dimension.
1 source records · Reviewed 2026-07-27Operations & user protectionPrimary evidence
79score / 100Weight 25% · Confidence 67%
As of 2026-07-27, Coinbase's official status page showed normal operation and no unresolved incidents. Complaint evidence remains limited and is not treated as proof of safety.
- System status: operational
- Unresolved incidents: 0
- Official channel: verified
- Trust Score: 10 / 10
Score contribution0.2 / 25
Why this score
Evidence highlightsSystem status: operational · Unresolved incidents: 0 · Official channel: verified · Trust Score: 10 / 10
Observed limitationAs of 2026-07-27, Coinbase's official status page showed normal operation and no unresolved incidents. Complaint evidence remains limited and is not treated as proof of safety.
Missing or limited evidencePrimary evidence
5 source records · Reviewed 2026-07-27Risk Drivers and Data Gaps
What moves the rating—and what remains uncertain.
Missing evidence is reported separately. It lowers coverage or confidence and is not automatically scored as a negative fact.
Key rating drivers
Corporate transparency
880.1 weightedCoinbase is publicly listed and provides named leadership, SEC filings and audited financial disclosures; group-level entity boundaries still depend on region.
Operations & user protection
790.2 weightedAs of 2026-07-27, Coinbase's official status page showed normal operation and no unresolved incidents. Complaint evidence remains limited and is not treated as proof of safety.
Regulatory & legal standing
780.2 weightedKey entities in Singapore, Luxembourg and the United States are verifiable, but U.S. service scope still varies by state.
Asset & solvency transparency
760.2 weightedAs a public company, Coinbase reports customer assets and liabilities and says U.S. dollar cash is held 1:1; it does not publish one continuous on-chain reserve ratio.
Security & incident history
520.1 weightedCoinbase disclosed a major customer-data theft incident in 2025 and customer reimbursements; it did not classify the event as a compromise of platform private keys.
Missing or limited evidence
Asset & solvency transparency
Evidence status: Primary evidence. This limits confidence in the dimension conclusion.
Operations & user protection
Evidence status: Primary evidence. This limits confidence in the dimension conclusion.
Scope limitation
The United States does not have one nationwide licence covering every state and every crypto product.
Scope limitation
Other Coinbase group entities provide payments, custody and related services; this profile prioritises three entities most relevant to retail exchange users.
Scope limitation
A licence or registration does not guarantee solvency, token value or a user's financial outcome.
Security Intelligence Coverage
9 signal families, with collection boundaries shown.
5 automated or configured · 4 require analyst review
Official service status
Statuspage summary, components and unresolved incidents can be fetched without credentials.
- Cadence
- Every 5 minutes
- Rating use
- Eligible after validation
Independent probes
DNS, TLS, homepage and public API probes are configured for independent availability checks.
- Cadence
- Every 5 minutes
- Rating use
- Context only
Security incidents
Status history and material company disclosures are normalized into incident records.
- Cadence
- Daily
- Rating use
- Eligible after validation
Reserves and wallets
Customer-asset and liability disclosures are reviewed from public-company filings.
- Cadence
- On change + weekly review
- Rating use
- Eligible after validation
Account controls
Security keys, security prompts, address allowlisting and Vault controls are documented.
- Cadence
- On change + weekly review
- Rating use
- Eligible after validation
Legal and regulatory
EDGAR filings, regulator registers and enforcement releases are checked for entity-specific changes.
- Cadence
- Daily
- Rating use
- Eligible after validation
Domain and phishing
Official-domain RDAP, DNS, TLS and certificate-transparency baselines are configured.
- Cadence
- Daily
- Rating use
- Context only
Vulnerability signals
NVD and CISA KEV are searched for named products and disclosed dependencies.
- Cadence
- Daily
- Rating use
- Never scored directly
Verified complaints
The official complaint path and Cexvia evidence intake are mapped; CFPB is used where a U.S. product match is possible.
- Cadence
- On change + weekly review
- Rating use
- Context only
Latest Risk Events
Verified changes connected to Coinbase.
elevatedResolvedRating input -3↗highConfirmedRating input -7↗
Coinbase published a postmortem for a multi-hour platform outage
Coinbase said trading, deposits, withdrawals and other services were unavailable or degraded for roughly eight hours, with full recovery taking longer.
Coinbase disclosed customer-data theft used for social engineering
Coinbase said criminals recruited overseas support agents to steal data from a subset of customers; passwords, private keys and direct platform funds were not reported exposed.
Asset, Security and Operations
The evidence behind the dimensions users care about most.
Asset and solvency transparency
76/100As a public company, Coinbase reports customer assets and liabilities and says U.S. dollar cash is held 1:1; it does not publish one continuous on-chain reserve ratio.
- Regular SEC filings
- Customer USD cash held 1:1
- No single continuous on-chain ratio
Security and incident history
52/100Coinbase disclosed a major customer-data theft incident in 2025 and customer reimbursements; it did not classify the event as a compromise of platform private keys.
- 2025 customer-data incident
- Reimbursement costs disclosed
- No direct platform private-key theft reported
Operations and user protection
79/100As of 2026-07-27, Coinbase's official status page showed normal operation and no unresolved incidents.
- System status: operational
- Unresolved incidents: 0
- Official status monitoring
- Official channel: verified
- Public sample: limited
Exposure guidance
Limited long-term custody
- Use case
- Suitable for normal trading with controlled exchange balances.
- Avoid
- Avoid using the exchange as a single long-term custody location.
- Reason
- Corporate transparency is the strongest observed area, while Security & incident history limits a stronger conclusion.
Action checklist
Choose your next step based on your current situation.
- 01Verify the official domain and app publisher
- 02Confirm the legal entity named in the account agreement
- 03Check whether the selected product is covered in your region
- 04Start with the minimum deposit
- 05Test one withdrawal
- 06Enable strong account security
- 07Avoid keeping unnecessary long-term balances
Compare Alternatives
Compare Coinbase with other published Passports.
ExchangeRiskScoreRegulatorySecurityConfidence
FAQ
Questions about Coinbase
Is Coinbase safe?
Coinbase is currently rated Moderate Risk at 75/100. This reflects observed public evidence and is not a guarantee of safety.
Is Coinbase regulated?
3 legal-entity records are mapped in this Passport. Each record has a jurisdiction-specific status and scope.
Which entity serves the selected region?
Singapore: Coinbase Singapore Pte. Ltd. — Major Payment Institution.
Does Coinbase publish reserve or solvency evidence?
As a public company, Coinbase reports customer assets and liabilities and says U.S. dollar cash is held 1:1; it does not publish one continuous on-chain reserve ratio.
Should funds be stored on Coinbase long term?
Limited long-term custody. Suitable for normal trading with controlled exchange balances. Avoid using the exchange as a single long-term custody location.
Verified sources
Every conclusion links back to primary evidence.
Each source shows its verification date and the specific statement it supports.
Regulator · Monetary Authority of Singapore
Tier A↗MAS Financial Institutions Directory — Coinbase
Licensed entity, licence type, permitted activities and registered address.
Platform terms · Coinbase
Tier B↗Coinbase MiCA and Luxembourg entity
European service entity, registration number, address and MiCA migration details.
Platform terms · Coinbase
Tier B↗Coinbase Licenses — United States
U.S. entity, NMLS identifier and state-by-state licence list.
Platform terms · Coinbase
Tier B↗Coinbase Singapore User Agreement
Singapore contracting entity, company number and stated risk limitations.
Platform terms · Coinbase
Tier B↗Coinbase Europe licenses
European legal entity, MiCA status and related payment entities.
Company disclosure · Coinbase Investor Relations
Tier B↗Coinbase SEC filings
Public-company filings covering customer crypto assets, liabilities, governance and material risks.
Reserve disclosure · Coinbase
Tier B↗How Coinbase stores client cash
How Coinbase holds customer U.S. dollar cash on a 1:1 basis.
Company disclosure · Coinbase Investor Relations
Tier B↗Coinbase Q1 2026 financial results
Customer reimbursement and cost disclosures related to the 2025 data-theft incident.
System status · Coinbase
Tier B↗Coinbase status
Current platform and funding-channel status plus incident history.
Platform terms · Coinbase
Tier B↗Coinbase complaints
Official complaint channel and escalation process.
Evidence coverage · Cexvia methodology
Method↗Cexvia complaint evidence standard
Complaint comparisons use verifiable primary evidence. The current cross-platform sample remains limited.
Market data · CoinGecko
Tier B↗Coinbase Exchange market data
Trust Score, exchange rank and 24-hour BTC-denominated trading volume.
Market data · CoinGecko
Tier B↗Trust Score methodology
CoinGecko methodology covering liquidity, cybersecurity, API coverage, team and incident signals.
Cexvia ratings reflect observed risk under available public evidence. A higher score means lower observed risk, not guaranteed safety. Coverage, confidence, redlines and score direction are published separately. This page is not investment, legal or custody advice. Commercial relationships do not change scores or suppress verified evidence.