Coinbase Commerce Withdraw Page Prompts Users for Plaintext Mnemonics

Security firm SlowMist_Team reports the Coinbase Commerce withdraw page prompts users to input plaintext mnemonic phrases and guides them to copy these phrases from Google Drive. Blockchain investigator zachxbt warns attackers could exploit this process for social engineering, potentially tricking users into disclosing wallet recovery phrases that grant full access to crypto assets. Security specialists note mnemonic phrases should remain offline and never be entered on web interfaces.