Coinbase director finds $322K in crypto for hack victim

After identifying multiple “rich list” Ethereum Classic addresses, a Coinbase director said he was able to track down one individual who lost hundreds of thousands of dollars in 2019

article-image

Ahmed Zaggoudi/Shutterstock modified by Blockworks

share

Conor Grogan, head of product business operations at Coinbase, said he has managed to locate $322,000 belonging to an individual who lost their life savings in a hack four years ago.

Grogan shared his findings on Twitter, explaining in a thread that during his investigation, he came across a “rich list” of Ethereum Classic (ETC) wallets that had “never touched their ETC balances.”

The Ethereum blockchain underwent a hard fork in 2016, resulting in the creation of ETC. Those who held ether (ETH) during the fork would have received an equal amount of ETC, but many people were unaware of this, according to Grogan.

Going through the list of accounts, Grogan said he was able to identify around 20 addresses holding more than $250,000 worth of ETC.

The next challenge lay in tracking down the owners. Traditional methods, such as tagging, were not particularly effective for 2016-era Ethereum. He noted that activities “that doxes people,” such as Ethereum Name Service, NFTs, and even Twitter, were limited at the time.

Grogan said he encountered “a number of dead ends” as many users had sent their entire balances to exchanges, leaving no digital trail to follow. 

Though the executive said he stumbled upon an address beginning with “0x475” that contained an unfamiliar crypto called “EOSDAC.” He later discovered holders of EOSDAC had received an airdrop on the Ethereum network in 2018 after registering their ETH addresses.

Blockworks was able to independently verify the address containing 16,999 ETC. 

By using the airdropped amount and the snapshot date, Grogan tweeted he was able to successfully connect the address to an EOS wallet linked to a $7.7 million hack back in 2019. 

“It turns out that the owner of 0x475 had their life savings stolen by a hacker in 2019 and was in a legal battle with their cybersecurity provider as well as with Bitfinex,” he said.

Grogan later managed to obtain the owner’s legal name associated with the ETH address after combing through legal filings. 

“I now had a doxxed name to link with the ETH address.”

Following his discovery, Grogan reached out to the wallet owner, who expressed astonishment, claiming they had no knowledge of the existence of the funds. 

Grogan declined an opportunity to be interviewed citing restrictions on discussing details with the media. 

The owner of the funds appears to have moved the recovered coins to a new wallet as of Thursday afternoon.


Get the news in your inbox. Explore Blockworks newsletters:

Tags

Decoding crypto and the markets. Daily, with Byron Gilliam.

Upcoming Events

Old Billingsgate

Mon - Wed, October 13 - 15, 2025

Blockworks’ Digital Asset Summit (DAS) will feature conversations between the builders, allocators, and legislators who will shape the trajectory of the digital asset ecosystem in the US and abroad.

Industry City | Brooklyn, NY

TUES - THURS, JUNE 24 - 26, 2025

Permissionless IV serves as the definitive gathering for crypto’s technical founders, developers, and builders to come together and create the future.If you’re ready to shape the future of crypto, Permissionless IV is where it happens.

Brooklyn, NY

SUN - MON, JUN. 22 - 23, 2025

Blockworks and Cracked Labs are teaming up for the third installment of the Permissionless Hackathon, happening June 22–23, 2025 in Brooklyn, NY. This is a 36-hour IRL builder sprint where developers, designers, and creatives ship real projects solving real problems across […]

recent research

Research Report Templates.png

Research

Maple Finance has successfully navigated significant market challenges through its strategic pivot to secured lending (Maple v2) and the launch of its Syrup product. Syrup has become a primary growth driver, delivering sustainable, outperforming stablecoin yields and rapidly increasing TVL. The upcoming custody-first Bitcoin staking product (istBTC) presents another significant avenue for expansion. Crucially, Maple has achieved operational profitability, a key inflection point that, combined with a fully vested token and active buyback mechanism, strengthens its investment case. While valuation metrics suggest potential undervaluation relative to peers and growth, the primary forward-looking risk identified is the long-term sustainability of its current high-take-rate collateral staking revenue model.

article-image

What was a cool $500,000 would now be worth more than $7 million

article-image

Mersinger’s final day at the CFTC will be May 30

article-image

Squads CEO Stepan Simkin explained why the firm launched Altitude and how he’s thinking about stablecoins

article-image

Sponsored

Instead of endless wallet popups, users could connect once, set clear rules, and delegate permission to an app or to an AI agent.

article-image

Prediction markets show that people bet in anticipation of things happening far too often

article-image

The agency’s final deadline is in October