Coinbase Ireland’s cash safeguards fell €5 million short before 2024 fix

The regulator found no evidence that consumers suffered actual harm in this case. Coinbase Ireland admitted breaches and accepted a reprimand and a €3,252,618 penalty, according to the regulator's announcement. Both sanctions still require High Court confirmation before taking effect.

Safeguarding failures

The settlement records daily underfunding from Jan. 1, 2023, through June 27, 2024. Maximum daily shortfalls were €3 million in 2023 and €5 million in 2024. Across that measured period, the average daily shortfall was 0.54% of Coinbase Ireland's safeguarding obligations.

The calculation failures affected both retail and institutional customers across all currencies. Changes to reporting data in July 2022 left the firm calculating its daily safeguarding obligation from incomplete information. A separate defect omitted certain unallocated customer funds from reconciliation calculations between September 2023 and June 2024, causing further underfunding.

Segregation issues

The bank also found failures to keep funds apart across Coinbase companies. In March 2023, 30 institutional customers were directed to deposit dollars into accounts in Coinbase Inc.'s name. The regulator said those measures did not satisfy the requirement for proper segregation in Coinbase Ireland's name.

Corrective actions

Coinbase Ireland corrected the funding shortfall in late June 2024. The underlying reporting defect and the separate unallocated-funds issue were fixed in October 2024. The Central Bank found excessive reliance on Coinbase Inc. without adequate Irish expertise or oversight.

That outsourcing breach ended on Dec. 16, 2024, when Coinbase Ireland appointed an individual responsible for safeguarding. A subsequent risk mitigation program, issued in January 2025, closed in June 2026 following external assurance.