“Heartbleed” and Coinbase

Apr 8, 2014 • Czytanie na 1 min

A group of researchers revealed a widespread internet vulnerability recently dubbed “Heartbleed”, which is an attack against a popular cryptographic library most websites use for SSL. Coinbase is not vulnerable to this attack and will be taking extra precautions shortly to eliminate any further risks. Visit the Cloudflare Blog for more details on our risk.

For more information on the bug, please visit these links below:

Najnowsze historie

Part 3/3 Owning Intelligence Series: How Coinbase Built, Evaluated, and Post-Trained a Fraud Agent

Yao Ma, Xuwei Tan, Akshit Trehan, Aman Choudhary, Anyscale Team: Eric Tang, Sumanth Hegde, Seiji Eicher, Jess Kong

Oct 8, 2026

TL;DR: Using SkyRL on Anyscale, we post-trained Qwen3.5-9B for Onramp fraud detection and served it with Ray Serve LLM and vLLM. On our benchmark, it exceeded Opus 4.5 across all four detection metrics, including 9.6% higher F1. In online inference, we reduced end to end latency by 55%.

Engineering

Part 2/3 Owning Intelligence Series: How Coinbase Built, Evaluated, and Post-Trained a Fraud Agent

Yao Ma, Xuwei Tan

Oct 7, 2026

TL;DR: Newer LLMs are not necessarily better at domain-specific tasks. On our fraud benchmark, newer Opus, Sonnet, and GPT versions all had lower recall, F1, and dollar-weighted recall—even when precision improved. The lesson: choose models using high-quality, domain-specific benchmarks, with reproducible evaluation and ideally deterministic scoring against verified outcomes. These findings also motivated our next step: post-training open-weight models for greater control over quality, cost, and deployment.

Engineering

Migrating 300+ namespaces from self-hosted Temporal to Temporal Cloud

Ian Yap

Oct 1, 2026

TL;DR: We moved more than 300 Temporal namespaces, across more than 300 services, from a cluster we ran ourselves onto Temporal Cloud. You cannot finish the move by repointing services at Temporal Cloud while workflows are still running on the old one. Where teams could pause new work, we waited for in-flight runs to finish and then switched; for trading, payments, and long-running work, we ran the old cluster and Temporal Cloud, and moved new workflows over in steps, with rollback as a config change. Private connectivity, per-namespace service allowlists, and encrypted payloads were in place before the first production namespace moved.

Engineering

Zastrzeżenia: Handel instrumentami pochodnymi za pośrednictwem platformy Coinbase Advanced jest oferowany uprawnionym klientom z EOG przez Coinbase Financial Services Europe Ltd. (licencja CySEC 374/19). Aby uzyskać dostęp do instrumentów pochodnych, klient musi przejść nasze standardowe kontrole, aby ustalić spełnienie kryteriów kwalifikacyjnych i odpowiedniość tego produktu.

“Heartbleed” and Coinbase

Najnowsze historie

Part 3/3 Owning Intelligence Series: How Coinbase Built, Evaluated, and Post-Trained a Fraud Agent

Coinbase and Samsung Bring USDC to Samsung Wallet

Part 2/3 Owning Intelligence Series: How Coinbase Built, Evaluated, and Post-Trained a Fraud Agent

Coinbase tworzy najbardziej kompletną platformę handlową

Part 1/3 Owning Intelligence Series: How Coinbase Built, Evaluated, and Post-Trained a Fraud Agent

Migrating 300+ namespaces from self-hosted Temporal to Temporal Cloud