It was frustrating that I didn't receive any contact from Coinbase until after posting on here HN, however I'd like to point out a couple things: - This was a

It was frustrating that I didn't receive any contact from Coinbase until after posting on here HN, however I'd like to point out a couple things: - This was a relatively minor XSS vulnerability which required a bit of social engineering to pull off, rather than being a traditional XSS that most HN readers would need to worry about. - Their delayed response was likely due to the relative minor nature of this vulnerability. - I still feel safe using Coinbase - They're taking care of it and treating me well :)