My coinbase got hacked today. I got a message on my phone saying that my password had changed. I attempted to follow instructions to stop it, but by the time I had, it was too late and the theif emptied out my hot wallet. The only saving grace was that coinbase has vaults which give 48 hour delay. I wish that I would have transferred more coins to the vault as they were protected. Coinbase has some serious vulnerabilities, but whoever the thief was was able to login from my IP and was able to login to my email despite the fact that I had just changed my password. Be careful out there. Cold wallet your coins.
It's never a good idea to store coins on exchange. However I doubt Coinbase has serious vulnerabilities. What happened is that you most likely got infected with a RAT. Its not a problem for the hacker to log in with your IP and your email really. Ways to prevent this is usage of 2FA
I second this idea. Sounds like a RAT attack to me. There's no way some random person can quickly know an IP and mask theirs as the slave IP. Chances are that the person sent you some adware or you stumbled on a bad file that gave path to someone's RAT. Be very careful with what you download on the internet nowadays. People will come at a few coins with whatever they have. Bitcoin offers no security to you even if you do get scammed or robbed.