Given the recent data breach and Coinbase’s user agreement that aims to force customers into arbitration rather than individual or class action lawsuits, it’s interesting to read the outcome of a recent arbitration case against Coinbase.
Customer lost $350,000 in September 2022 to a phishing attack from a scammer that the customer said had “confidential information that could have only been obtained with direct access to Coinbase’s database”.
Coinbase didn’t prevent the suspicious transfers, allegedly wiped customer’s transaction history, blamed the customer for the loss, then refused to reimburse. Arbitration concluded with $0 reimbursement.
Arbitrator found the complaint had been filed too late, and that the customer had admitted that a third party rather than a Coinbase insider had performed the theft. Doesn’t appear the arbitrator investigated the claims of a possible breach, or how the hardware MFA was bypassed.

![9. On December 17, 2024, Arbitrator Kruze issued an Order Granting Dispositive Motion as to all of Mr. Spilker’s claims. Ex. A at 6 (“Respondent’s Motion for Summary Judgment is GRANTED. Claimant’s claims against Coinbase are dismissed.”). 10. The Final Award holds: a. Claimant’s EFTA cause of action is time-barred because the “one-year limitations period begins when the first unauthorized transfer occurs, not upon discovery by the consumer, and not when the consumer notifies the defendant of the unauthorized transfer.” Id. at 3, applying 15 U.S.C. §1693m(g) and Wike v. Vertrue, Inc., 566 F.3d 590,593 (6th Cir. 2009). b. “The undisputed facts show that a third party, not Coinbase, caused Claimant’s damages” and that “Claimant’s damages were the result of an intervening and superseding cause: the actions of a third-party scammer. Coinbase, as a matter of law, cannot be held liable for Claimant’s damages.” Ex. A at 4, citing May v. Google, LLC, No. 24-CV-01314- BLF, 2024 WL 4681604, at *10 (N.D. Cal. Nov. 4, 2024). c. The parties’ contract forecloses Mr. Spilker’s causes of action for breach of contract, negligence and tort claims, and claims under Idaho and Oregon law. Ex. A at 5. d. Pursuant to Melchoir v. New Line Prods., Inc., 106 Cal. App. 4th 779, 793 (2003), “Claimant’s cause of action for unjust enrichment fails because ‘there is no [such thing as a] cause of action in California for unjust enrichment.’” Ex. A at 5. e. Mr. Spilker’s CLRA claim fails “as courts have consistently held that the CLRA does not apply to cryptocurrency exchanges like Coinbase”. Id. at 6, citing various cases.](https://storage.mollywhite.net/micro/0bbcc42846cc232283eb_Screenshot-2025-05-27-at-1.04.40---PM.png)





![Claimant does not dispute these facts in its briefing. In other words, Claimant’s damages were the result of an intervening and superseding cause: the actions of a third-party scammer. Coinbase, as a matter of law, cannot be held liable for Claimant’s damages. See May v. Google, LLC, No. 24-CV-01314-BLF, 2024 WL 4681604, at *10 (N.D. Cal. Nov. 4, 2024). Third, Claimant’s supplemental production also eviscerates many of Claimant’s other causes of action. For example, in his Demand, Claimant alleges that Coinbase never advised users that staked ETH could be wrapped and traded before his September 2022 loss. In its Motion and Reply, Coinbase previously relied on public statements announcing the launch of cbETH as early as August 2022. Claimant’s belated production, attached to Respondent’s supplemental briefing, also contains undisputed facts that Claimant was himself actually informed about cbETH’s launch before his funds were stolen. This disclosure significantly undermines Claimant’s misrepresentation claims under common law, securities law, and commodities law. Fourth, the parties’ contract forecloses many of Claimant’s causes of action. For example, Claimant’s breach of contract claim is undercut by section 6.6 of the UA, which explicitly apportions the risk of account compromises to Claimant as the user: “Any loss or compromise of . . . your personal information may result in unauthorized access to your Coinbase Account(s) by third-parties and the loss or theft of any Digital Assets and/or funds held in your Coinbase Account(s) and any associated accounts, including your linked bank account(s) and credit card(s). . . .We assume no responsibility for any loss that you may sustain due to compromise of account login credentials due to no fault of Coinbase.” Moreover, the UA’s choice-of-law provision in section 9.5 restricts Claimant to California law, foreclosing Claimant’s Idaho and Oregon-based causes of action. In addition, the UA and California law effectively cut off Claimant’s tort claims, such as his negligence cause of action. See, e.g., Berk v. Coinbase, Inc., 840 F. App’x 914 (9th Cir. Dec. 23, 2020) (Coinbase owes no independent tort duty of care beyond the promises made in the UA). Finally, there are other independent reasons why Claimant’s Demand cannot succeed. For example, Claimant’s cause of action for “unjust enrichment” fails because “there is no [such thing as a] cause of action in California for unjust enrichment.” Melchior v. New Line Prods., Inc., 106 Cal. App. 4th 779, 793 (2003). As another example, Claimant submitted no evidence of any false statements made by](https://storage.mollywhite.net/micro/cb92d9a3b3a2046762ee_Screenshot-2025-05-27-at-1.13.11---PM.png)











![27. On March 19, 2025, Armstrong unleashed another tweet accusing O’Leary of committing “actual crimes”: “Doesn’t everybody think it’s weird that I’ve been publicly calling … @kevinolearytv [a] murderer[] and yet not a single word or legal action? It’s almost like they ‘can’t’ because a lawsuit would open up their actual crimes and they know it.”](https://storage.mollywhite.net/micro/cc6240fece1a25cdb952_Screenshot-2025-03-27-at-11.15.02---PM.png)





![Screenshot of Molly White’s Citation Needed newsletter: “Recently, there has been a push by the cryptocurrency industry to portray crypto as a major issue that will influence votes in the upcoming election season. This just so happens to coincide with Donald Trump's recent statements suggesting he's warmed to the industry. Although Trump personally has actually been far more vocally anti-crypto than Joe Biden — in 2021 saying bitcoin “just seems like a scam”1 and reportedly ordering Treasury Secretary Steve Mnuchin to “go after bitcoin” in 20182 — that hasn’t stopped many in the cryptocurrency world from embracing him as the supposedly pro-crypto candidate anyway.
Screenshot of Trump tweets: I am not a fan of Bitcoin and other Cryptocurrencies, which are not money, and whose value is highly volatile and based on thin air. Unregulated Crypto Assets can facilitate unlawful behavior, including drug trade and other illegal activity....
....Similarly, Facebook Libra’s “virtual currency” will have little standing or dependability. If Facebook and other companies want to become a bank, they must seek a new Banking Charter and become subject to all Banking Regulations, just like other Banks, both National...
...and International. We have only one real currency in the USA, and it is stronger than ever, both dependable and reliable. It is by far the most dominant currency anywhere in the World, and it will always stay that way. It is called the United States Dollar!
It's not entirely clear why Trump has done a U-turn. Perhaps it's simply because supporting crypto has become the Republican thing to do. Perhaps it was because he himself discovered the grift potential this industry unlocks when released his own set of NFTs in 2022 [W3IGG]."](https://storage.mollywhite.net/micro/df4feefa2858d25e523c_www.citationneeded.news_2024-cryptocurrency-election-spending_-iPad-Mini-.png)


