Slowmist CISO: Coinbase Commerce Asset Recovery Page Sitemap Also Has Vulnerabilities with Phishing Attack Risks

ZkProver · 2026-03-19T03:46:51+00:00

ChainCatcher News: Following Slow Mist founder余弦's disclosure that Coinbase Commerce's asset recovery page directly requests users to input plaintext seed phrases, which poses a security risk, Slow Mist Chief Information Security Officer 23pds further noted that the page's sitemap also has flaws. Malicious attackers can easily use tools like ResourcesSaver to download the frontend code and deploy similar websites.If combined with phishing attacks using domains similar to Coinbase, users could easily be deceived.

ZkProver

2026-03-19 03:46:51

ChainCatcher reports that after the founder of SlowMist, Yu Xian, disclosed the risk of directly asking users to input plaintext seed phrases on the Coinbase Commerce asset recovery page, SlowMist’s Chief Information Security Officer 23pds added that the site’s sitemap also has vulnerabilities. Malicious attackers can easily use tools like ResourcesSaver to download the frontend code and deploy similar websites.

If combined with similar domains like Coinbase for phishing attacks, users can be easily deceived.

View Original

This page may contain third-party content, which is provided for information purposes only (not representations/warranties) and should not be considered as an endorsement of its views by Gate, nor as financial or professional advice. See Disclaimer for details.

1 Likes