Ari Paul, founder and Chief Investment Officer of digital-asset manager BlockTower Capital, publicly accused Coinbase on September 28 of losing approximately $25 million of his firm's funds and concealing the incident.

In social-media posts, Paul alleged the loss formed part of a coordinated pattern of security breaches affecting more than a dozen financial institutions, with cumulative undisclosed losses exceeding $1 billion. He attributed his silence on specifics to active legal proceedings that restrict disclosure of the timeline, the technical mechanism and the names of other affected counterparties.

What did BlockTower allege?

Paul's public statements contain four core claims:

• Coinbase lost roughly $25 million of BlockTower funds in an incident at an unspecified prior date.
• The exchange concealed the breach rather than disclose it.
• The pattern extends to more than a dozen institutions.
• Aggregate losses tied to the alleged campaign exceed $1 billion.

How has Coinbase responded?

As of September 29, Coinbase had issued no public statement, press release or on-record denial. A customer-support account reached Paul through direct message after the posts went live. No formal corporate communication followed.

Crypto outlets including The Block, Odaily and Lookonchain relayed the allegations. None produced independent on-chain evidence, court filings or third-party corroboration for the figures, the timeline or the scope of the claimed breaches.

Why does the allegation matter?

BlockTower Capital, founded in 2017, runs institutional digital-asset strategies. Coinbase serves as custody and trading infrastructure for a broad institutional client base. A confirmed loss at this tier, paired with an alleged cover-up, would carry regulatory exposure under U.S. money-transmitter rules and state-level custody requirements, and would draw scrutiny from federal agencies with jurisdiction over both firms.

What remains unverified?

The litigation Paul cited leaves the core facts open and likely unverifiable through public sources until either party releases documents under judicial process. By September 29, no court filing, on-chain record or external investigator had validated Paul's numbers.

The absence of a year for the alleged $25 million loss — and of any named compromised wallet or exploited protocol — leaves every technical detail inside Paul's narrative. The $1 billion figure for the broader campaign rests on his sole characterization.

What comes next?

The next inflection point is a formal Coinbase statement. The exchange faces mounting pressure to address the claims directly, particularly given the institutional concentration of named counterparties and the dollar figures in dispute. Until BlockTower's litigation hold lifts or Coinbase publishes a denial backed by evidence, the matter remains an unverified allegation touching the market-structure layer of institutional crypto custody.