Hacker News Reader

if they did a SIM swap that means that they compromised the user's phone, if I'm not mistaken.

You are mistaken. A SIM swap is a compromise at the carrier, not the handset.

Ah so how is this Coinbases fault I also dont understand? Seems like a carrier issue.

Coinbase shouldn't have been using SMS as 2FA to begin with.

They also had a security bug in their SMS-based recovery system, according to other commenters in the thread.