Coinbase removes legacy Commerce tool after seed phrase concerns
Researchers raised alarms over a Coinbase-linked Commerce page that prompted wallet recovery phrase entry, which Coinbase said was part of a legacy product now being retired.
Update (March 20, 6:30 am UTC): This article has been updated to add a statement from Coinbase.
Security researchers raised concerns about a Coinbase-associated Commerce page that appeared to prompt users to enter wallet recovery phrases, warning that such a flow could normalize behavior commonly exploited in phishing scams.
The page has circulated widely on social media after being flagged by the founder of the blockchain security platform SlowMist, Yu Xian, known as Cos.