Key Takeaways
- • BlockTower Capital founder Ari Paul alleges Coinbase lost $25 million in company funds and concealed over $1 billion in "massive and repeated hacks" affecting at least a dozen firms.
- • Paul states Coinbase "still wouldn't return our money" and claims multiple legal processes are ongoing, limiting what he can publicly disclose about the allegations.
- • Coinbase denies the accusations, stating via a support post that it is "not hiding a series of hacks" and did not lose $1 billion, citing standard security practices around API key management.
- • BlockTower Capital, founded in 2017 by Paul and Goldman Sachs executive Matthew Goetz, has faced internal instability, with two executives departing in 2022-2023 and the company shuttering its $100 million Market-Neutral Fund in 2023.
- • The dispute centers on account security and fund recovery, with Coinbase arguing it does not retain information necessary to transact on customer accounts, a standard practice among exchanges offering API access.
Summary
BlockTower Capital founder Ari Paul publicly accused Coinbase on September 28, 2026, of losing $25 million belonging to his cryptocurrency and traditional asset investment firm while allegedly covering up over $1 billion in "massive and repeated hacks" affecting multiple institutional clients. Paul claims at least a dozen firms were impacted by the alleged security breaches and that Coinbase has refused to return BlockTower's funds despite his requests.
Paul indicated that the full scope of his allegations cannot be disclosed publicly due to ongoing legal proceedings. He framed his comments as a response to social media posts by Cobie, a prominent crypto investor, who was addressing broader customer complaints about Coinbase's account security and fund handling. The allegations touch on a critical vulnerability in crypto exchange operations: the security of customer accounts and the exchange's responsibility when unauthorized access occurs.
Coinbase responded by directing inquiries to a published support post in which the exchange categorically denied the accusations. The statement asserted that Coinbase "is not hiding a series of hacks" and refuted the $1 billion loss figure entirely. Coinbase emphasized its standard industry practice of not retaining the information required to transact on customer accounts, positioning this as a security feature rather than a limitation. The exchange declined to comment on specific client situations.
BlockTower Capital's credibility in raising these allegations is complicated by the firm's recent operational challenges. The investment firm, co-founded by Paul and Matthew Goetz (a former Goldman Sachs executive) in 2017, has experienced notable internal disruptions, including the departure of two executives in 2022 and 2023 and the closure of its flagship $100 million Market-Neutral Fund in 2023. These developments raise questions about the firm's operational stability and resource management.
The dispute highlights persistent tensions within the crypto exchange ecosystem regarding account security standards, the custody of digital assets, and institutional investor protections. Whether through legal resolution or settlement, the outcome of this case could establish important precedents for how exchanges manage security breaches and allocate responsibility for fund recovery in institutional accounts.
Paul indicated that the full scope of his allegations cannot be disclosed publicly due to ongoing legal proceedings. He framed his comments as a response to social media posts by Cobie, a prominent crypto investor, who was addressing broader customer complaints about Coinbase's account security and fund handling. The allegations touch on a critical vulnerability in crypto exchange operations: the security of customer accounts and the exchange's responsibility when unauthorized access occurs.
Coinbase responded by directing inquiries to a published support post in which the exchange categorically denied the accusations. The statement asserted that Coinbase "is not hiding a series of hacks" and refuted the $1 billion loss figure entirely. Coinbase emphasized its standard industry practice of not retaining the information required to transact on customer accounts, positioning this as a security feature rather than a limitation. The exchange declined to comment on specific client situations.
BlockTower Capital's credibility in raising these allegations is complicated by the firm's recent operational challenges. The investment firm, co-founded by Paul and Matthew Goetz (a former Goldman Sachs executive) in 2017, has experienced notable internal disruptions, including the departure of two executives in 2022 and 2023 and the closure of its flagship $100 million Market-Neutral Fund in 2023. These developments raise questions about the firm's operational stability and resource management.
The dispute highlights persistent tensions within the crypto exchange ecosystem regarding account security standards, the custody of digital assets, and institutional investor protections. Whether through legal resolution or settlement, the outcome of this case could establish important precedents for how exchanges manage security breaches and allocate responsibility for fund recovery in institutional accounts.
Go deeper than the headline
Research every firm in this story, track the ones that matter and get the daily briefing — free for 7 days.