Coinbase Faces €170,874 Dutch Lawsuit Over Alleged Account Takeover

Coinbase faces the threat of a €170,874 Dutch lawsuit over an alleged account takeover and unauthorized removal of funds in January 2024. The customer claims that session-cookie hijacking allowed an attacker to steal €53,674.95 through four transactions completed in less than two minutes. Coinbase initially rejected liability, attributing the incident to compromised customer credentials.

The claim relies heavily on Dutch payment-services rules governing unauthorized transactions. Article 7:522 of the Dutch Civil Code requires the payer's consent for a payment transaction to be considered authorized. The customer is also challenging Coinbase's transaction monitoring, alleging that the platform failed to react to a sudden geographical change and four rapid high-value transfers.

The customer is seeking not only the original €53,674.95 loss but also €106,397.02 in claimed missed portfolio profits tied to 1.40402148 BTC and 12,031.26215895 DOGE that were forcibly liquidated. The calculation uses the portfolio's claimed peak value on October 6, 2025.

The dispute could force detailed scrutiny of Coinbase's authentication records, transaction controls, and handling of unauthorized-payment claims under European law. If proceedings are filed, the case could become an evidence-heavy Dutch proceeding over authorization, authentication, gross negligence, and payment-security controls.