-
Coinbase successfully thwarted a supply chain attack targeting its open-source AI toolkit, agentkit.
-
The attacker exploited GitHub’s permissions to inject malicious code into the CI/CD pipeline.
-
However, Coinbase’s swift response, along with support from security experts, prevented any serious breach.
Coinbase averts significant cyber threat against its open-source AI toolkit, enhancing security measures amid rising crypto industry vulnerabilities.
How Coinbase Stopped a Major Cyber Attack
According to Unit 42, the attacker targeted ‘agentkit’, an open-source toolkit managed by Coinbase that supports blockchain-based AI agents.
The threat actor forked agentkit and onchainkit repositories on GitHub, inserting malicious code intended to exploit the continuous integration pipeline. The suspicious activity was first detected on March 14, 2025.
“The payload was focused on exploiting the public CI/CD flow of one of their open source projects – agentkit, probably with the purpose of leveraging it for further compromises,” Unit 42 reported.
A Malicious Commit Targeting Coinbase. Source: Unit42
The attacker exploited GitHub’s “write-all” permissions, which allowed the injection of harmful code into the project’s automated workflow. This method could have enabled access to sensitive data and created a path for broader compromises.
However, Unit 42 reported that the payload collected sensitive information but did not contain advanced malicious tools like remote code execution or reverse shell exploits.
Meanwhile, Coinbase responded quickly, collaborating with security experts to isolate the threat and apply necessary mitigations. This rapid action helped the company avoid deeper infiltration and prevented potential damage to its infrastructure.
The stakes were high considering Coinbase’s standing as the largest crypto exchange in the US and a key custodian for spot Bitcoin ETFs.
A breach of this nature could have caused major disruption across the crypto industry, especially after Bybit’s recent $1.4 billion security incident.
Despite the failed attempt, the attacker has since shifted focus to a larger campaign now drawing global attention.
In light of this, SlowMist founder advised developers using GitHub Actions—especially those working with tj-actions or reviewdog—to audit their systems and confirm that no secrets have been exposed.
“If your company uses reviewdog or tj-actions, do a thorough self-examination,” Yu Jian stated on X.
This incident highlights the growing importance of securing open-source tools as the crypto ecosystem expands. Data from DeFillama shows that the crypto industry has recorded exploits of more than $1.5 billion this year.
Conclusion
Coinbase’s proactive response to the recent attack exemplifies the vital role of swift incident management in cybersecurity. As the crypto space continues to grow, both developers and platforms must prioritize security to mitigate risks and safeguard sensitive data.
