The recent data compromise at Coinbase has ignited fresh demands for the elimination of Know Your Customer (KYC) protocols in licensed cryptocurrency exchanges.<\/p>\n
Criminal entities bribed the exchange\u2019s overseas customer support representatives in December 2024 to obtain access to the personal data<\/a> of 70,000 individuals. In May, Coinbase acknowledged<\/a> that hackers had acquired information like government-issued ID photos and residential addresses.<\/p>\n \u201cThis entire charade of security needs to be eliminated urgently. Time and again, it only serves the interests of hackers and extortionists,\u201d stated<\/a> the pseudonymous developer Banteg on X. \u201cKYC effectively facilitates criminal activity.\u201d<\/p>\n Nonetheless, it remains impractical for exchanges to disregard KYC completely, as it is a legal requirement in numerous jurisdictions. In the meantime, privacy-enhancing options like zero-knowledge (ZK) proofs are still constrained by their cost and technical intricacies.<\/p>\n The latest data scandal surrounding Coinbase puts the Nasdaq-listed firm under scrutiny. However, this concern extends to all centralized cryptocurrency platforms functioning under regulatory licenses globally<\/a>. Centralized exchanges are now tasked with collecting and managing passport images, government IDs, selfies, or even utility bills from users merely looking to trade.<\/p>\n KYC was initially established to minimize fraud, money laundering, and financing of terrorism. However, in reality, it\u2019s the everyday users who find themselves vulnerable while determined attackers discover ways to circumvent the system.<\/p>\n \u201cAnyone can produce a counterfeit US passport or diploma from a prestigious law school. And 50% of businesses engaging in identity checks are likely to be overcome using generative AI,\u201d Ilia Kolochenko, the CEO of cybersecurity firm ImmuniWeb, told Cointelegraph.<\/p>\n In February 2024, reports surfaced indicating that individuals could successfully navigate crypto exchange KYC verification barriers by creating passports through AI<\/a>. Then in October 2024, another AI tool emerged to incorporate a video generation feature to overcome crypto KYC checks.<\/p>\n Related: <\/strong><\/em>AI agents are positioned to become crypto\u2019s next significant vulnerability<\/strong><\/em><\/a><\/p>\n In 2023, notable blockchain investigator ZachXBT revealed details of an instance where he circumvention Gate.io\u2019s verification process using a fictitious identity named after North Korean leader \u201cKim Jong-Un.\u201d He indicated that it only took him a few minutes to accomplish.<\/p>\n Lisa Loud, executive director of the Secret Foundation, suspects that her personal details were part of Coinbase\u2019s breach due to the rising volume of dubious spam messages she’s been receiving.<\/p>\n \u201cJust yesterday, I received five messages concerning Coinbase, claiming someone was attempting to access my 2FA or withdraw funds,\u201d Loud informed Cointelegraph. \u201cThe fundamental goal of Web3 is to transcend the challenges of Web2, not to replicate them.\u201d<\/p>\n In a financial context, she regards herself as fortunate, as she doesn\u2019t possess much on the exchange. Her greater concern lies with her private information that malicious actors might access.<\/p>\n KYC was not crafted with cryptocurrency in mind, yet it has become a staple of how regulators compel the burgeoning industry to adhere to conventional standards.<\/p>\n \u201cThe issue isn\u2019t that we\u2019re KYC-ing individuals; it\u2019s that we\u2019re implementing it the Web2 approach and not the innovative way,\u201d stated Loud. \u201cTheir aim is to enhance their risk model. This makes sense from a business standpoint \u2014 yet it\u2019s wholly unjust to users.\u201d<\/p>\n Related: <\/strong><\/em>Violent crypto heists are increasing: Six assaults targeting investors<\/strong><\/em><\/a><\/p>\n KYC procedures originated in the 1970s under the US Bank Secrecy Act and saw significant reinforcement after the 9\/11 attacks via the USA PATRIOT Act<\/a> under the \u201cCustomer Identification Program.\u201d<\/p>\n Cryptocurrency appeared much later but increasingly depends on identity verification. Malicious actors can acquire stolen identities or KYC-verified accounts on darknet markets, or utilize sophisticated tools, like AI, to bypass these verifications at minimal expense.<\/p>\n Some users have advocated for the abolition of KYC in favor of modern advancements like zero-knowledge (ZK) technology. This would allow one party to prove to another that certain information is accurate without disclosing the underlying data. In theory, this could enable regulators to meet compliance requirements while preserving user privacy.<\/p>\n \u201cThe challenge is that exchanges and numerous Web3 companies are all conducting KYC separately and repeatedly. However, if I could verify my identity once and then use that service to provide a zero-knowledge proof of my identity, it would be significantly more effective,\u201d Loud stated.<\/p>\n Even though contemporary blockchain-based solutions can enhance privacy while validating user identities, Kolochenko asserted that KYC will remain prevalent across borders despite its shortcomings.<\/p>\n \u201cKYC is here to stay, and regulators will not loosen the standards. If anything, they will heighten them. Without it, crypto risks becoming a tool for every imaginable<\/p>\n “““html In spite of the security occurrence, Kolochenko opted not to categorize it as a data breach, mentioning that client details were obtained through the bribery of foreign Coinbase personnel rather than via infrastructure compromise or a technical flaw.<\/p>\n No matter the terminology used, clients\u2019 data has been jeopardized. There\u2019s little they can undertake apart from adhering to best practices to uphold a pristine digital presence.<\/p>\nKYC proves to be a flawed gatekeeper for Coinbase<\/h2>\n
Coinbase illustrates how Web2 KYC fails Web3 users<\/h2>\n
Coinbase scandal will not eliminate KYC<\/h2>\n
\ncrime,\u201d he stated.<\/p>\n