BlockTower Founder Ari Paul: Coinbase Covered Up Over $1 Billion in Hacker Losses
BlockTower Capital founder and CIO Ari Paul stated that Coinbase "lost" approximately $25 million of his company's funds years ago, later discovered to be covering up multiple large-scale hacking incidents, and the funds have yet to be returned. Paul mentioned that the team has tracked at least a dozen affected institutions, with the covered-up amount exceeding $1 billion. He also indicated that due to ongoing legal proceedings, he cannot disclose more details at this time. In public statements, he placed "lost" in quotes, clearly indicating that he believes this is not merely an operational error, but rather a handling of repeated hacking incidents.
The same individual previously stated that Coinbase has "lost" at least $2 billion of user funds and lacks effective recourse, noting that most insurance clauses default to denial of claims unless negotiated line by line with top lawyers in advance. He also mentioned that his claims against Coinbase are still stuck in a slow legal process and has indicated that disclosing more documents could lead to threats of litigation.
Coinbase's customer support account later contacted Paul, inviting him to provide details via private message, but did not make any further public response regarding the "cover-up of over $1 billion in hacker losses." The company had previously disclosed that overseas customer service contractors were bribed to steal customer data, refused to pay a $20 million ransom, and estimated the costs of repair and voluntary compensation to be between $180 million and $400 million, while emphasizing that prime accounts, hot wallets, and cold wallets were not directly breached.
An arbitration case made public in 2025 showed that a customer lost approximately $328,700 in crypto assets due to a social engineering attack in 2024, and the arbitration tribunal ruled that Coinbase should compensate a total of approximately $618,000; the ruling also mentioned that the TaskUs-related data issues were known in January 2025, but the customer was not informed until May of that year. Additional class action materials indicated that outsourced employees sold customer records for about $200 per photo, with a maximum of approximately 200 records taken in a single day, and over 10,000 customer data stored on their phones.
In market mechanisms, this is a trust shock driven by institutional custody disputes, rather than an immediate sell-off event. The selling pressure mainly falls on institutions and high-net-worth clients sensitive to centralized custody premiums; buyers are retail and publicly traded stock funds that still view Coinbase as a compliant entry point. Beneficiaries are independent custody, self-custody hardware, and on-chain settlement services; those under pressure are Coinbase's custody fees, prime business premiums, and its pricing power as a narrative of "not losing customer assets." The event itself re-prices "funds on exchanges" from a convenient option to a legal recourse risk.
On the supplementary data level, publicly available materials have not provided on-chain reconciliations for the $25 million and "over $1 billion" mentioned by Paul; verifiable figures include approximately 69,000 affected customers disclosed by Coinbase, the cost range of $180 million to $400 million, as well as a $16 million impersonation scam in New York involving about 100 victims.
Source: Public Information
ABAB AI Insight
Ari Paul is not a spontaneous whistleblower. He worked as a derivatives market maker at Susquehanna from 2006 to 2010, later managing a portfolio and tail hedging for the University of Chicago's $8 billion endowment fund, and co-founded BlockTower with Matthew Goetz in 2017, raising over $140 million in early funding from investors including Andreessen Horowitz and Union Square Ventures, and acquiring Gamma Point in 2021. After the merger of BlockTower and Arca from 2024 to 2025, he shifted to advisory roles and participated in Strobe Ventures. This trajectory has led him to frame "losing money" as an arbitrable legal asset that can be disseminated to over a dozen institutions, rather than merely a complaint on social media.
The capital path is clear: hedge funds place large positions into compliant entry points for liquidity and settlement convenience. Once assets are "lost" and not returned, litigation itself becomes a recovery mechanism. Paul expands the single $25 million claim into "at least a dozen, over $1 billion," effectively turning individual claims into industry samples. Coinbase's resource mobilization is another set: refusing to pay a $20 million ransom, offering a $20 million bounty, accruing repair and voluntary compensation costs of $180 million to $400 million, while separating prime and hot/cold wallets from the incident circle. On one side, legal processes extend time, while on the other, compensation budgets suppress the retail side, pushing the institutional side into arbitration and confidentiality procedures.
Similar structures have appeared in the bankruptcy settlements of Mt. Gox, customer queues for FTX, and the issuance of recovery tokens after Bitfinex hacks: centralized entry points first absorb scale, then use law and time to replace immediate payment. Coinbase is at a control stage transitioning from a "retail trading platform" to "regulated custody and prime infrastructure," not in an early expansion phase. ZachXBT previously pointed out that its risk control model is aggressive, with users losing over $300 million annually due to social engineering; the TaskUs outsourcing chain turns low-cost customer service into a data leakage risk. Therefore, the industry position is not merely "another hack," but rather that custody premiums are beginning to be re-priced due to legal friction.
The structural judgment indicates a transfer of pricing power. The mechanism is: when customer assets may legally become general creditor claims, insurance clauses default to denial of claims, and outsourced personnel can price customer records for sale, exchanges no longer hold unilateral narrative power over "asset safety." Pricing power shifts from brand and license to arbitration courts, class actions, and verifiable compensation records. Those who can immediately return money to customer accounts after an incident can continue to collect custody fees; those who push the truth into "multiple legal proceedings still ongoing" turn convenience taxes into litigation options.
ABAB News · Cognitive Laws
- Custody fees buy access, not ownership.
- The primary function of insurance clauses is to deny claims, not to pay.
- Scale turns incidents into law, and time turns law into discounts.