My coinbase got hacked today. I got a message on my phone saying that my password had changed. I attempted to follow instructions to stop it, but by the time I had, it was too late and the theif emptied out my hot wallet. The only saving grace was that coinbase has vaults which give 48 hour delay. I wish that I would have transferred more coins to the vault as they were protected. Coinbase has some serious vulnerabilities, but whoever the thief was was able to login from my IP and was able to login to my email despite the fact that I had just changed my password. Be careful out there. Cold wallet your coins.
That's why I'm not going to store most of my bitcoin on an exchange because there's no perfect exchange. I just can't understand on how did the hacker was able to log in with your IP, are you exposing your details online or you are sharing someone with your internet? Did you reached out the coinbase support and asked to help you with your problem? You should ask them to help you since it's also a fault to their system until finding out that it's your fault.