Coinbase Exec Slams US Treasury’s Cybersecurity Gaps Post-Hack

Coinbase CLO Paul Grewal has raised concerns about the US Treasury’s lack of preparedness following a significant cyber breach on December 8, 2025.

The hack, which gave Chinese hackers access to unclassified documents, has sparked widespread criticism. Although the Department of Treasury and FBI has launched an investigation into the breach, Grewal warned that such incidents could undermine public trust in the Bank Secrecy Act, a law requiring crypto firms to share sensitive customer data with federal agencies.”

Coinbase Executive Questions Bank Secrecy Act Mandate

In a post on X (formerly Twitter), Grewal referenced a statement by an MIT researcher, claiming the Treasury was “unprepared in several critical ways.” He argued the incident raises concerns over the Bank Secrecy Act’s far-reaching requirements, which mandate crypto companies to provide customer documents when federal laws are violated.

The Chinese hacked Treasury and a @MIT researcher says that Treasury was unprepared for the incident in “multiple important ways.” Maybe next time anyone dares to question the wisdom of an unbounded Bank Secrecy Act mandate to turn over untold volumes of personally identifiable…

— paulgrewal.eth (@iampaulgrewal) January 7, 2025

The crypto community has long expressed concerns about exchanges sharing user data with US agencies. The recent hack amplifies these fears, as Treasury-held data could be vulnerable to future attacks.

Blockchain’s Role in Strengthening Cybersecurity

Grewal suggested the breach may discourage US individuals and firms from submitting sensitive customer information to the Treasury, especially as the hackers remain at large and the investigation continues.

On X, Tanvi Ratna, a digital asset strategist, called the breach a glaring issue in the government’s cybersecurity strategy. She recommended adopting privacy-focused measures, like blockchain-based systems and zero-trust models, to minimize vulnerabilities.

Read also: Coinbase, Ripple CEOs Gain Profits With Pro-Crypto Election Victory

Ratna emphasized how blockchain technology offers privacy-by-design features that agencies could use to safeguard sensitive data. Zero-trust models verify access requests individually, limiting exposure to third-party risks.

The incident has sparked widespread discussion about cybersecurity practices. On social media, users suggested hiring more skilled experts and improving the overall approach to digital security. The hack has also prompted calls for reforms to ensure better data protection for citizens and businesses alike.

Source