Central Bank of Ireland Fines Coinbase Ireland 3.25 Million Euros Over Customer Fund Safeguarding Failures
Published October 22, 2026, 7:15 PM PKT. Based on the Coinbase official blog statement of October 22, 2026 and the Central Bank of Ireland settlement as reported by Reuters on October 22, 2026 (primary sources), and reporting by Bitcoin Magazine, news.bitcoin.com and FX News Group on October 22, 2026 (secondary sources). This is the first MABOnChain article on the Coinbase Ireland safeguarding fine. It is distinct from MABOnChain's October 21 article on Ireland moving 500 BTC from Clifton Collins seized wallets to Coinbase Prime, which concerned seized criminal proceeds, not Coinbase Ireland's own compliance, and from the November 2025 21.5 million euro Irish fine on a different Coinbase unit for anti-money laundering monitoring failures.
The Central Bank of Ireland has fined Coinbase Ireland Limited 3,252,618 euros for breaching safeguarding and outsourcing obligations under Ireland's Electronic Money Regulations 2011, the regulator announced on October 22, 2026. The breaches ran from November 1, 2020 to August 19, 2025, according to the settlement notice, and the fine follows a settlement the Central Bank reached with Coinbase Ireland on October 21, 2026. Coinbase Ireland is an electronic money institution that provides fiat services to European customers, issuing the euro and dollar balances customers use to buy crypto assets on the Coinbase platform, and the law requires those balances to sit in designated safeguarding accounts, walled off from corporate money and from customers of other Coinbase entities.
The 5.2 million euro shortfall
The core finding is that the safeguarding account did not always hold what it was supposed to hold. The Central Bank said Coinbase Ireland failed to adequately safeguard customer funds through inadequate system design and insufficient control testing, and as a result allowed its designated safeguarding account to be underfunded for lengthy periods of time, according to the settlement notice reported by FX News Group. News.bitcoin.com reports that daily shortfalls in the designated customer-funds account reached as much as 5.2 million euros in 2024. Coinbase, in its own statement, describes the problems as technical data discrepancies that affected its safeguarding calculation, the use of non-Coinbase Ireland bank accounts to receive customer deposits before transferring those funds to safeguarding accounts, and the way certain safeguarding processes were outsourced. Coinbase said it self-reported many of the items in the settlement to the Central Bank in January 2024 and has since fully fixed them.
The regulator's second strand of findings concerns oversight, not just arithmetic. The Central Bank said Coinbase Ireland failed to have an adequate outsourcing governance framework, placed excessive reliance on the US-based Coinbase Group as an outsourced service provider to implement safeguarding processes and controls, and failed to have sufficient local skill and expertise available within Coinbase Ireland to oversee the core function of managing and safeguarding customer funds at all times, according to the settlement notice. It also said the firm failed to have adequate internal control and escalation procedures and sufficient governance processes to identify and report material changes concerning safeguarding to the Central Bank. "Payment and e-money firms have a fundamental obligation to fully safeguard customers' funds," Central Bank Director of Enforcement Karen O'Leary said in the regulator's statement, as reported by Reuters. "The Central Bank has made its supervisory expectations in this regard clear: we have no tolerance for weaknesses in safeguarding arrangements."
The settlement math: 4.65 million cut to 3.25 million
The headline fine is the discounted figure, and the settlement notice shows the working. The Central Bank determined that sanctions comprising a reprimand and a monetary penalty of 4,646,597 euros were warranted, then applied a 30 percent settlement scheme discount, bringing the amount to 3,252,618 euros, according to the settlement notice. Coinbase Ireland has admitted the prescribed contraventions, agreed to the undisputed facts, and accepted the sanctions, but the sanctions are subject to confirmation by the High Court of Ireland and will take effect only once confirmed, the notice says. That confirmation step matters for readers: the fine is announced and accepted, but it is not yet legally in effect until the court confirms it.
Coinbase's response stresses two points: no customer harm, and remediation already done. "We have fully addressed the concerns that led to this settlement and there was no customer impact: no client suffered any financial loss or was unable to access their funds as a result of these historic practices," Coinbase said in its October 22 statement. The company said it has strengthened its safeguarding processes, added further technical controls, and brought in additional expertise. Bitcoin Magazine reports that Coinbase has redesigned its safeguarding calculation, passed two third-party validations with no open findings, posted a 25 million euro guaranty bond, and hired a dedicated head of safeguarding. A Coinbase spokesperson added, as reported by Reuters, that the issues largely arose in the context of Coinbase taking steps to protect customers during periods of significant disruption, a company account of the context that does not remove the regulator's finding that safeguarding and outsourcing obligations were breached.
The second Irish penalty in under a year
This is the second Irish penalty on a Coinbase unit in under a year, and the pattern is now part of the story. In November 2025, the Central Bank fined a Coinbase subsidiary 21.5 million euros for breaching anti-money laundering and counter-terrorist transaction monitoring obligations, Reuters reports, after the unit failed to monitor more than 30 million transactions for money laundering and terrorist financing risk. Bitcoin Magazine reports that unit's Irish registration lapsed at the end of 2025 as the exchange shifted its European headquarters to Luxembourg under a MiCA license from Luxembourg's financial regulator. The two fines concern different obligations, different units and different periods, but together they show European regulators testing whether crypto firms' European operations have local control to match their global scale, and they land as Coinbase, the largest US crypto exchange and the world's biggest custodian of bitcoin, holding coins on behalf of most US spot bitcoin ETFs, faces the same question in every jurisdiction it operates in.
This article is news reporting and is not investment advice.
Sources
- Coinbase, Resolving Past Safeguarding Issues: Our Settlement with the Central Bank of Ireland (October 22, 2026), primary source
- Reuters, Irish central bank fines Coinbase unit 3.25 million euros (October 22, 2026), primary source
- Bitcoin Magazine, Central Bank Of Ireland Fines Coinbase Unit 3.25 Million Euros Over Customer Fund Safeguarding Failures (October 22, 2026), secondary source
- news.bitcoin.com, Coinbase Ireland Fined 3.25 Million Euros After Customer Fund Safeguard Lapses (October 22, 2026), secondary source
- FX News Group, Irish c-bank imposes 3.25M fine on Coinbase Ireland (October 22, 2026), secondary source
MABOnChain Daily Brief
The key crypto and markets stories in one short, plain-language email. Free. Unsubscribe any time.
Prefer chat? Join us on Telegram Watch on YouTube
Keep reading
SoFi Launches First Bank-Issued Tokenized Deposit for Consumers at 4.40% APY
SoFi Technologies said on October 22, 2026 that it has launched SoFi Earn (SOFIE), which it calls the first and only national bank-issued tokenized deposit for consumers. Each SOFIE represents $1 on deposit at SoFi Bank, earns a variable 4.40% annual percentage yield, and is covered by FDIC insurance up to applicable limits. Members can convert SOFIE one for one into the SoFiUSD stablecoin to buy crypto in the SoFi app or move funds over blockchain rails around the clock, and the product is rolling out to SoFi Crypto members now through November 2026.
CoinDCX Denies New Hack as $16M in USDT Moves From Old Compromised Wallets
Indian exchange CoinDCX said on October 22, 2026 that about 15.99 million USDT and 5,783.81 TRX that moved on October 21 came from old wallet addresses created in January 2025 and compromised in its July 2025 hack, not from a new breach, after blockchain security researcher Darcy flagged the transfers from addresses labeled as CoinDCX hot wallets and deposit addresses to a single TRON address. CoinDCX said user funds are safe and trading continues as usual, while the receiving address split the funds onward toward deposit addresses at Binance, OKX and Gate, and no independent confirmation of the old wallet link has yet appeared.
Trump Says Nearly $1B in Scam-Linked Crypto Is Frozen as DOJ Goes Nationwide
President Donald Trump said at an October 21, 2026 White House cybercrime roundtable that federal authorities have frozen nearly $1 billion in cryptocurrency tied to foreign scammers and prevented at least $1.6 billion in losses this year, while Attorney General Todd Blanche announced a newly established Justice Department cyber-enabled scam initiative that deploys dozens of prosecutors across all 94 U.S. Attorneys offices. The Justice Department Scam Center Strike Force lists $938,460,156.82 in cryptocurrency restrained as of October 15, 2026, money held back from movement, not money already returned to victims.
NEAR Jumps 7% as Business Launch Targets Private Crypto Treasuries
NEAR rose about 7% to $5.31 on October 21, 2026, a day after NEAR Protocol launched NEAR Business, a private treasury platform that lets teams pay staff and vendors, swap assets and allocate capital across more than 35 blockchains while keeping payroll and treasury balances confidential from the market but legible to auditors, according to NEAR and Stocktwits reporting. The move also landed as a House of Stake vote opened on cutting annual issuance from 2.5% to 1.6% over 24 months, and as NEAR Intents passed $32 billion in cumulative volume in the third quarter of 2026.
Solana Alpenglow Goes Live on Mainnet in Biggest Consensus Switch Since Launch
Solana has activated Alpenglow, its first major consensus upgrade, on mainnet on October 21, 2026, replacing the TowerBFT voting system it has used since launch with a new protocol called Votor that targets transaction finality in about 150 milliseconds, down from roughly 12.8 seconds. CryptoBreaking, citing the Solana Foundation Alpenglow dashboard, put activation at about 1:54 pm UTC, in epoch 1064, while the dashboard reading at press time showed finality of about 6.6 seconds and throughput of about 4,721 transactions per second, a reminder that the 150 millisecond figure is a target to converge toward, not an instant day one measurement. The second Alpenglow phase, Rotor, which would replace the Turbine block propagation system, does not activate with Votor and remains unscheduled.
Standard Chartered Signs Definitive Deal to Take Full Ownership of Zodia Custody
Standard Chartered has signed definitive agreements to acquire 100% of Zodia Custody, the institutional digital asset custodian it helped create, turning a takeover first agreed in principle in May into a binding deal. Standard Chartered I H Limited will acquire 100% of Zodia Custody UK Limited, the parent of Zodia's regulated operating entities in Singapore, Hong Kong, Australia, the United Arab Emirates and Luxembourg, subject to regulatory approvals and customary closing conditions, with financial terms undisclosed. After completion, Zodia's custody business joins the bank's Securities Services division, while its software and professional services assets move to Zodia Solutions, a new independent entity under SC Ventures backed by bank investors including Northern Trust, NAB Ventures, SBI Ventures and Emirates NBD.
OCC Finalizes First GENIUS Act Stablecoin Rule, Sets January 18, 2027 Start Date
The U.S. Office of the Comptroller of the Currency has issued the first final rule implementing the GENIUS Act, setting reserve, redemption and capital standards for payment stablecoin issuers under its jurisdiction, effective January 18, 2027. Issuers must hold reserves at least equal to their outstanding stablecoins and generally redeem within two business days, while the agency dropped a proposed presumption that affiliate rewards deals violate the law's yield ban, leaving existing rewards programs to case-by-case review. The rule covers national banks, federal savings associations, federal branches and nonbank firms seeking federal qualified issuer status, with a $5 million capital floor, while anti-money-laundering rules will follow in separate rulemaking with the Treasury.
Aave Backs Tokenized SpaceX Shares as Collateral With Strict Guardrails Ahead of 2.43 Billion Share Unlock
Aave risk adviser LlamaRisk has backed listing tokenized SpaceX shares, trading as SPCXc, as collateral on Aave V4's Equities Hub on Base, but only under the hub's toughest terms: a 55% collateral factor, a 6.5% maximum liquidation bonus, a 1,000 basis point risk premium and a 37,000 token supply cap worth about $5.8 million. The caution reflects SpaceX's four months of public trading history and a lock-up calendar that releases 2.43 billion shares, 84% of the current float, between October 26 and December 8, 2026. SPCXc would be collateral-only, with USDC the only borrowable asset, and larger liquidations would depend on redemptions or derivatives hedges because onchain depth is thin.
Drift Exploiter Sends Another $46M in ETH to Tornado Cash, Two-Day Total Hits $109M
Wallets linked to the April 2026 Drift Protocol exploit sent about 18,800 ETH, worth roughly $46 million, into Tornado Cash on October 21, 2026, according to blockchain tracker Onchain Lens, taking the two-day total to 44,510 ETH, worth about $109 million. The move follows the roughly $61 million first tranche on October 20 that MABOnChain reported, and Arkham Intelligence labeled wallets still held about 56,569 ETH, worth roughly $138 million, after the latest deposits. Drift has attributed the April attack, which cost about $295 million, to a North Korean threat group, and victims are claiming through a DFX recovery token scheme that started with a pool of about $3.1 million.
France Proposes MiCA Rules to Hold Crypto Platforms Liable for DeFi Access Failures
France's Treasury, AMF, Banque de France and ACPR published a joint response on October 21, 2026 to the European Commission's MiCA review consultation, proposing that crypto platforms which actively connect customers to DeFi protocols should face liability for certain client losses when they fail to vet protocols or ignore known risks. The proposal would also move supervision of significant crypto firms to ESMA, lower the 15 million daily active user threshold for significant status, and rework MiCA's stablecoin categories after zero asset-referenced tokens were authorized. The Commission's report to EU lawmakers is due by June 30, 2027.
UK High Court Lets 16,000 Victims Appeal Ruling on 61,000 Seized Bitcoin in Qian Zhimin Case
The UK High Court has granted about 16,000 Chinese fraud victims permission to appeal its October 12, 2026 ruling that Chinese law governs property claims over more than 61,000 Bitcoin seized in the Qian Zhimin money laundering case, according to PANews reporting on October 21 that cited Caixin. The appeal keeps alive the victims' bid to claim a share of a stash worth about 3.8 billion pounds, after the original ruling said their claims must be tested under Chinese law rather than English property law. Lawyers at the follow-up hearing also discussed litigation costs from the earlier dispute and how individual applicants can continue or withdraw their claims.
Ether ETFs Pass $1.08B in October Outflows, Biggest Monthly Drain of 2026
U.S. spot Ether ETFs have shed $1.08 billion so far in October 2026, the biggest monthly outflow of the year and the largest since November 2025, after Tuesday added $26 million to the drain, according to SoSoValue data reported by Cointelegraph. The withdrawals have erased September's $832 million in net inflows and left year to date net inflows at about $485 million, while Ether has fallen 9.7% in October to $2,438. Bitcoin funds moved the other way at the start of the week, pulling in $527 million on Monday before adding $23 million on Tuesday.
Fake Ngrave Security Alerts Drain $2.56M From 70 Wallets
Belgian hardware wallet maker NGRAVE disclosed on October 19, 2026 that attackers hijacked a third party push notification provider for its LIQUID companion app and sent fake security alerts to users on October 17, tricking them into entering recovery phrases on a counterfeit website and draining about $2.56 million from 70 wallets across four blockchains. Bitcoin accounted for $1.77 million of the losses, followed by $454,000 in XRP, $316,000 in Ethereum based assets and $18,000 in Stellar. NGRAVE says its ZERO hardware wallets were never compromised, and its chief executive admitted the company had absolutely and utterly failed in its most basic security duty.
Zcash Jumps 10% as NU7 Locks In Mainnet Activation for 25-Second Blocks
Zcash jumped about 10% on October 21, 2026, trading near $1,260, after developers set the mainnet activation height for NU7, the network upgrade that cuts Zcash block times from 75 seconds to 25 seconds. The activation height is the block number at which every node switches to the new rules, and NU7 pairs the threefold speedup with a Network Sustainability Mechanism that routes 60% of each block's transaction fees into a reserve paid back out over time. ZEC has gained roughly 45% in the past week and about 138% over 30 days, pushing its market capitalization back above $20 billion for the first time since 2016.
Qubic Restarts Blockchain and Opens Recovery Claims After $1.4M Wallet-Seed Hack
Qubic has restarted its blockchain and opened a recovery-claims platform after a wallet-seed vulnerability drained about $1.4 million in QU tokens from 1,404 accounts, the project said in its latest update. The network resumed processing ticks at 8:00 pm on October 19, advancing past tick 85,371,949 where it was halted on Sunday, October 18, after the project’s Computor validators approved a recovery plan and the first batch of recovered funds was returned to verified owners. Qubic says 87.1% of the stolen tokens stayed immobilized on the paused network while 12.9% went to MEXC, which froze the receiving account, and it warns that any wallet created with its web wallet before version 4.26.4, released October 19, should be treated as insecure. Affected users have until May 1, 2027 to submit claims through the project’s sole official reclaim site.
CME Logs First Trades in Bitcoin Cash and Uniswap Futures With FalconX-GSR Debut Block Trade
CME Group confirmed on October 20, 2026 that FalconX and GSR executed the first block trade in its new Bitcoin Cash and Uniswap futures, with trading now underway on the world's largest derivatives venue. The launch extends CME's single-asset crypto futures lineup to 11 tokens and makes UNI the first DeFi protocol token with standalone CME futures, in standard 10,000-UNI and micro 1,000-UNI sizes trading 24 hours a day. CME's crypto futures and options business has averaged more than 242,000 contracts a day in 2026, about $7.9 billion in notional value, with its five earlier altcoin futures this year adding nearly $2 billion in year-to-date notional.
SkyAI Sells Entire Solana Treasury, Launches $201.3M Tender Offer
SkyAI, the Nasdaq-listed company formerly known as Sharps Technology, has sold its entire Solana treasury and launched a $201.3 million cash tender offer to repurchase up to 95% of its shares and warrants, according to an October 19, 2026 SEC filing. The company held $223.8 million in cash and zero SOL as of October 16, reversing a strategy that at its peak held more than 2 million SOL bought for over $400 million. The $3-per-share offer expires October 29, but major shareholder Bastion Trading, with about 9.99% of the stock, is refusing to participate and wants at least $3.50 plus an independent review of the SOL sales.
Ireland Moves Another 500 BTC From Clifton Collins' Seized Wallets to Coinbase Prime
A wallet linked to convicted Irish drug trafficker Clifton Collins moved 500 BTC, worth about $41.5 million, to Coinbase Prime on October 20, 2026, the fifth 500-BTC tranche recovered from his long-thought-lost Bitcoin fortune this year. Blockchain intelligence firm Arkham Intelligence flagged the transfer; about 2,500 BTC have now moved from the wallets in 2026, while roughly 3,500 BTC worth about $290 million remain. Collins bought about 6,000 BTC in 2011 and 2012 at roughly $5 each, printed the private keys on paper and hid them in a fishing rod case, and lost access in 2017. Ireland's Criminal Assets Bureau, with help from Europol's European Cybercrime Centre, began opening the wallets in March 2026.
Stablecoin Transfers Quadruple to $891B in Q3 as U.S. Banks Test the Rails, Coinbase Study Finds
Research conducted for Coinbase by The Block Pro Research found that adjusted stablecoin transfer volume hit $891 billion in the third quarter of 2026, more than four times the level of early 2023, with over $400 million moving per hour and 73% of volume settling outside U.S. banking hours. The study, titled The Always-On Dollar, says seven of the ten largest U.S. banks have tested stablecoins or tokenized deposits for settlement, with the remaining three announcing plans to do so, while 293 million blockchain addresses now hold stablecoins, more than the combined card bases of American Express and Discover.
ZachXBT Says 87% of FreedomXMR Inflows on Hyperliquid Are Illicit Funds
Blockchain investigator ZachXBT said on October 20, 2026 that more than 87% of the funds flowing into FreedomXMR, a centralized exchange service on Hyperliquid Core, are tied to illicit activity, according to reporting by crypto.news and PANews based on his published investigation. ZachXBT traced more than $20 million in inflows above a $10,000 review threshold to ransomware payments, cryptocurrency exploits, malware and social engineering attacks, including the September 2026 incidents at DCENT Wallet, Fetch.ai and Axelar, plus an October exploit on the Gamdom gambling platform. He also alleged the service's operator sourced Monero liquidity through KuCoin, identifying more than 3,000 deposits from associated addresses.