+ there was another bug (or "feature") that allowed all access to all funds via API access key. Sure, the user needs to allow the permissions first, but the wa

+ there was another bug (or "feature") that allowed all access to all funds via API access key. Sure, the user needs to allow the permissions first, but the warning where disproportionate to the power it gave away. They've disabled this kind of access since though. http://www.theverge.com/2014/2/7/5386222/a-string-of-thefts-hit-coinbase-bitcoins-most-reputable-wallet-service http://www.theverge.com/2014/2/7/5386222/a-string-of-thefts-...