Top that off with Coinbase's buggy automated KYC system, hackable 2FA, and lack of customer support, and it makes me wonder if this is the best that $140 million investment can deliver?
Regardless about coinbase being insecure in general I was looking/curious about the bug bounties coinbase has been offering (and for gdax too as they are under the same company umbrella) and the highest bounty bid range that has been claimed is $5k but they offer up to $50k in bug bounties up to remote exectuable code for gdax.
As far as the $140milliom, coinbase/gdax are hiring multiple positions for backend gdax senior engineers and other support. The recent infusion of $140million is only from a few months ago so I'm pretending the money wisely and hiring high quality people doesn't happen overnight.
Secondly, alot of the funding has been spent on fees for liscensing in NY as coinbase continued to pull through as multiple other platforms pulled out of NY when it became nightmarishly expensive and overly complicated to deal with relative to every other state.
Finally, as coinbase is one of the few maybe the only besides one or two others that is liscensed in NY that means wallstreet is trading on it, so the spikes are definitely subject to be exposed or show other latency issues on the platforms that are legal for people to use, now that multiple banks have come out and acknowledged they are trading with BTC.