Exchanges / Coinbase
30-second risk check: Coinbase
Coinbase Risk Rating, Licences and Safety Review
coinbase.com · Official site verified ↗Likely contracting entity: Coinbase Singapore Pte. Ltd.Major Payment Institution
Regional regulatory fit · Moderate Risk
Is Coinbase safe? Cexvia rates it Moderate Risk at 75/100.
For Singapore users, the mapped entity is Coinbase Singapore Pte. Ltd. under Major Payment Institution. Its strongest area is Corporate transparency; the main observed concern is Security & incident history.
Evidence for this conclusion ↓Run the 15-point safety checklist ↗Cexvia Exchange Safety RatingA higher score means lower observed risk
Coinbase75Moderate Risk
Security52Asset & 76Regulato78Regulatory & legal standing78Corporate transparency88Asset & solvency transparency76Security & incident history52Operations & user protection79
Coinbase performs best in Corporate transparency at 88/100. Its main risk is Security & incident history at 52/100.
- 01
Singapore users generally contract with Coinbase Singapore Pte. Ltd. Evidence ↓
- 02
EEA MiCA services are provided by Coinbase Luxembourg S.A. Evidence ↓
- 03
U.S. services are provided by Coinbase, Inc., with licence and product scope varying by state. Evidence ↓
Selected: SG / Coinbase Singapore Pte. Ltd. · Verified 2026-07-27
Overall safety score75Moderate Risk
Checks completed5 / 5
Coinbase Licences and Legal Entities
Which company operates Coinbase in your region, and what licence does it hold?
Coinbase serves Singapore, the European Economic Area and the United States through different legal entities. The company named in your account agreement determines the applicable licence and protection perimeter.
RegionContracting entityRegulatory recordScopeStatusChecked
What does the licence record actually verify?
- Named legal entity and jurisdiction
- Permitted or registered activities
- Current public-record status at the verification date
Does a licence guarantee that customer funds are safe?
- Protection against all asset loss
- Global coverage for every user or product
- Complete solvency or future regulatory status
Regulatory & legal standingComplete
78score / 100Weight 25% · Confidence 94%
Key entities in Singapore, Luxembourg and the United States are verifiable, but U.S. service scope still varies by state.
- 3 key legal entities
- SG / LU / US
- U.S. scope varies by state
Score contribution0.2 / 25
Why did this area receive this score?
Evidence supporting the score3 key legal entities · SG / LU / US · U.S. scope varies by state
What users should watchKey entities in Singapore, Luxembourg and the United States are verifiable, but U.S. service scope still varies by state.
What information is still missing?No material public-information gap currently affects this conclusion.
0 source records · Reviewed 2026-07-27Corporate transparencyComplete
88score / 100Weight 15% · Confidence 95%
Coinbase is publicly listed and provides named leadership, SEC filings and audited financial disclosures; group-level entity boundaries still depend on region.
- Public company: NASDAQ
- SEC filings: ongoing
- Leadership: disclosed
Score contribution0.1 / 15
Why did this area receive this score?
Evidence supporting the scorePublic company: NASDAQ · SEC filings: ongoing · Leadership: disclosed
What users should watchCoinbase is publicly listed and provides named leadership, SEC filings and audited financial disclosures; group-level entity boundaries still depend on region.
What information is still missing?No material public-information gap currently affects this conclusion.
1 source records · Reviewed 2026-07-27Asset & solvency transparencyPrimary evidence
76score / 100Weight 20% · Confidence 88%
As a public company, Coinbase reports customer assets and liabilities and says U.S. dollar cash is held 1:1; it does not publish one continuous on-chain reserve ratio.
- Regular SEC filings
- Customer USD cash held 1:1
- No single continuous on-chain ratio
Score contribution0.2 / 20
Why did this area receive this score?
Evidence supporting the scoreRegular SEC filings · Customer USD cash held 1:1 · No single continuous on-chain ratio
What users should watchAs a public company, Coinbase reports customer assets and liabilities and says U.S. dollar cash is held 1:1; it does not publish one continuous on-chain reserve ratio.
What information is still missing?Primary evidence
2 source records · Reviewed 2026-07-27Security & incident historyComplete
52score / 100Weight 15% · Confidence 92%
Coinbase disclosed a major customer-data theft incident in 2025 and customer reimbursements; it did not classify the event as a compromise of platform private keys.
- 2025 customer-data incident
- Reimbursement costs disclosed
- No direct platform private-key theft reported
Score contribution0.1 / 15
Why did this area receive this score?
Evidence supporting the score2025 customer-data incident · Reimbursement costs disclosed · No direct platform private-key theft reported
What users should watchCoinbase disclosed a major customer-data theft incident in 2025 and customer reimbursements; it did not classify the event as a compromise of platform private keys.
What information is still missing?No material public-information gap currently affects this conclusion.
1 source records · Reviewed 2026-07-27Operations & user protectionPrimary evidence
79score / 100Weight 25% · Confidence 67%
As of 2026-07-27, Coinbase's official status page showed normal operation and no unresolved incidents. Complaint evidence remains limited and is not treated as proof of safety.
- System status: operational
- Unresolved incidents: 0
- Official channel: verified
- Trust Score: 10 / 10
Score contribution0.2 / 25
Why did this area receive this score?
Evidence supporting the scoreSystem status: operational · Unresolved incidents: 0 · Official channel: verified · Trust Score: 10 / 10
What users should watchAs of 2026-07-27, Coinbase's official status page showed normal operation and no unresolved incidents. Complaint evidence remains limited and is not treated as proof of safety.
What information is still missing?Primary evidence
5 source records · Reviewed 2026-07-27Coinbase Rating Explained
What raises or lowers the Coinbase rating, and what remains unknown?
Missing information reduces confidence, but Cexvia does not treat an undisclosed fact as proof of wrongdoing.
Main factors in the Coinbase rating
Corporate transparency
880.1 weightedCoinbase is publicly listed and provides named leadership, SEC filings and audited financial disclosures; group-level entity boundaries still depend on region.
Operations & user protection
790.2 weightedAs of 2026-07-27, Coinbase's official status page showed normal operation and no unresolved incidents. Complaint evidence remains limited and is not treated as proof of safety.
Regulatory & legal standing
780.2 weightedKey entities in Singapore, Luxembourg and the United States are verifiable, but U.S. service scope still varies by state.
Asset & solvency transparency
760.2 weightedAs a public company, Coinbase reports customer assets and liabilities and says U.S. dollar cash is held 1:1; it does not publish one continuous on-chain reserve ratio.
Security & incident history
520.1 weightedCoinbase disclosed a major customer-data theft incident in 2025 and customer reimbursements; it did not classify the event as a compromise of platform private keys.
What should users verify before deciding?
Asset & solvency transparency
Public evidence for Asset & solvency transparency remains primary evidence, so this conclusion is less certain.
Operations & user protection
Public evidence for Operations & user protection remains primary evidence, so this conclusion is less certain.
Scope limitation
The United States does not have one nationwide licence covering every state and every crypto product.
Scope limitation
Other Coinbase group entities provide payments, custody and related services; this profile prioritises three entities most relevant to retail exchange users.
Scope limitation
A licence or registration does not guarantee solvency, token value or a user's financial outcome.
On-chain transparency
What can be observed on Coinbase's public wallets?
Observed assets, stablecoin flows and wallet coverage for publicly identified Coinbase addresses.
Verified wallet data has not been connected for this exchange yet.
View full on-chain data ↗Coinbase Security Monitoring
Is Coinbase affected by outages, hacks, phishing or complaint clusters?
9 risk-signal families tracked · 5 automated or configured · 4 require analyst review
Official service status
Statuspage summary, components and unresolved incidents can be fetched without credentials.
- Check frequency
- Every 5 minutes
- Rating impact
- Eligible after validation
Independent probes
DNS, TLS, homepage and public API probes are configured for independent availability checks.
- Check frequency
- Every 5 minutes
- Rating impact
- Context only
Security incidents
Status history and material company disclosures are normalized into incident records.
- Check frequency
- Daily
- Rating impact
- Eligible after validation
Reserves and wallets
Customer-asset and liability disclosures are reviewed from public-company filings.
- Check frequency
- On change + weekly review
- Rating impact
- Eligible after validation
Account controls
Security keys, security prompts, address allowlisting and Vault controls are documented.
- Check frequency
- On change + weekly review
- Rating impact
- Eligible after validation
Legal and regulatory
EDGAR filings, regulator registers and enforcement releases are checked for entity-specific changes.
- Check frequency
- Daily
- Rating impact
- Eligible after validation
Domain and phishing
Official-domain RDAP, DNS, TLS and certificate-transparency baselines are configured.
- Check frequency
- Daily
- Rating impact
- Context only
Vulnerability signals
NVD and CISA KEV are searched for named products and disclosed dependencies.
- Check frequency
- Daily
- Rating impact
- Never scored directly
Verified complaints
The official complaint path and Cexvia evidence intake are mapped; CFPB is used where a U.S. product match is possible.
- Check frequency
- On change + weekly review
- Rating impact
- Context only
Coinbase Safety and Regulatory News
Has Coinbase reported hacks, withdrawal problems or regulatory action?
elevatedResolvedRating input -3↗highConfirmedRating input -7↗
Coinbase published a postmortem for a multi-hour platform outage
Coinbase said trading, deposits, withdrawals and other services were unavailable or degraded for roughly eight hours, with full recovery taking longer.
Coinbase disclosed customer-data theft used for social engineering
Coinbase said criminals recruited overseas support agents to steal data from a subset of customers; passwords, private keys and direct platform funds were not reported exposed.
Exchange Safety, Reserves and Withdrawals
Is Coinbase safe? Check its reserves, security incidents and withdrawal risk.
Are reserves transparent and is solvency verifiable?
76/100As a public company, Coinbase reports customer assets and liabilities and says U.S. dollar cash is held 1:1; it does not publish one continuous on-chain reserve ratio.
- Regular SEC filings
- Customer USD cash held 1:1
- No single continuous on-chain ratio
Has the exchange suffered hacks or major security incidents?
52/100Coinbase disclosed a major customer-data theft incident in 2025 and customer reimbursements; it did not classify the event as a compromise of platform private keys.
- 2025 customer-data incident
- Reimbursement costs disclosed
- No direct platform private-key theft reported
Are withdrawals working and are users protected?
79/100As of 2026-07-27, Coinbase's official status page showed normal operation and no unresolved incidents.
- System status: operational
- Unresolved incidents: 0
- Official status monitoring
- Official channel: verified
- Public sample: limited
Fund-storage guidance
Limited long-term custody
- How to use it
- Suitable for normal trading with controlled exchange balances.
- Higher-risk use
- Avoid using the exchange as a single long-term custody location.
- Why
- Corporate transparency is the strongest observed area, while Security & incident history limits a stronger conclusion.
Account, Deposit and Withdrawal Checklist
Opening an account, holding funds or unable to withdraw? Start here.
- 01Verify the official domain and app publisher
- 02Confirm the legal entity named in the account agreement
- 03Check whether the selected product is covered in your region
- 04Start with the minimum deposit
- 05Test one withdrawal
- 06Enable strong account security
- 07Avoid keeping unnecessary long-term balances
Compare Exchange Safety
How does Coinbase compare with other exchanges on risk and security?
ExchangeRiskScoreRegulatorySecurityConfidence
Before you deposit
Run the safety checklist for Coinbase
Check the official domain, legal entity, licence, reserves, incident history and your exit route in one interactive worksheet.
FAQ
Questions about Coinbase
Is Coinbase safe?
Coinbase is currently rated Moderate Risk at 75/100. This reflects observed public evidence and is not a guarantee of safety.
Is Coinbase regulated?
3 legal-entity records are mapped in this Passport. Each record has a jurisdiction-specific status and scope.
Which entity serves the selected region?
Singapore: Coinbase Singapore Pte. Ltd. — Major Payment Institution.
Does Coinbase publish reserve or solvency evidence?
As a public company, Coinbase reports customer assets and liabilities and says U.S. dollar cash is held 1:1; it does not publish one continuous on-chain reserve ratio.
Should funds be stored on Coinbase long term?
Limited long-term custody. Suitable for normal trading with controlled exchange balances. Avoid using the exchange as a single long-term custody location.
Coinbase · Official Records and Verifiable Evidence
Coinbase licence, reserve, security and operating sources
Open the original records used to check the exchange, including the verification date and the conclusion each source supports.
Regulator · Monetary Authority of Singapore
Tier A↗MAS Financial Institutions Directory — Coinbase
Licensed entity, licence type, permitted activities and registered address.
Platform terms · Coinbase
Tier B↗Coinbase MiCA and Luxembourg entity
European service entity, registration number, address and MiCA migration details.
Platform terms · Coinbase
Tier B↗Coinbase Licenses — United States
U.S. entity, NMLS identifier and state-by-state licence list.
Platform terms · Coinbase
Tier B↗Coinbase Singapore User Agreement
Singapore contracting entity, company number and stated risk limitations.
Platform terms · Coinbase
Tier B↗Coinbase Europe licenses
European legal entity, MiCA status and related payment entities.
Company disclosure · Coinbase Investor Relations
Tier B↗Coinbase SEC filings
Public-company filings covering customer crypto assets, liabilities, governance and material risks.
Reserve disclosure · Coinbase
Tier B↗How Coinbase stores client cash
How Coinbase holds customer U.S. dollar cash on a 1:1 basis.
Company disclosure · Coinbase Investor Relations
Tier B↗Coinbase Q1 2026 financial results
Customer reimbursement and cost disclosures related to the 2025 data-theft incident.
System status · Coinbase
Tier B↗Coinbase status
Current platform and funding-channel status plus incident history.
Platform terms · Coinbase
Tier B↗Coinbase complaints
Official complaint channel and escalation process.
Evidence coverage · Cexvia methodology
Method↗Cexvia complaint evidence standard
Complaint comparisons use verifiable primary evidence. The current cross-platform sample remains limited.
Market data · CoinGecko
Tier B↗Coinbase Exchange market data
Trust Score, exchange rank and 24-hour BTC-denominated trading volume.
Market data · CoinGecko
Tier B↗Trust Score methodology
CoinGecko methodology covering liquidity, cybersecurity, API coverage, team and incident signals.
Cexvia ratings reflect observed risk under available public evidence. A higher score means lower observed risk, not guaranteed safety. Coverage, confidence, redlines and score direction are published separately. This page is not investment, legal or custody advice. Commercial relationships do not change scores or suppress verified evidence.