Base Wallet Drained? Trace Stolen ETH & Tokens on Coinbase L2

Why Base drains confuse victims

Base is an Ethereum L2 (chain ID 8453) popular with Coinbase Wallet users. The same 0x address exists on Ethereum mainnet and Base, but balances and transaction history are separate ledgers.

Many victims bridged USDC or ETH from Coinbase to Base, then lost funds on L2 while searching Etherscan mainnet.

Confirm the network is Base

• Wallet must show Base (not Ethereum, Arbitrum, or Optimism).
• Open basescan.org and paste your address — Activity tab lists Base-only txs.
• If empty on Basescan but balance dropped in wallet, double-check network selector.

Document within the first hour

• Every outbound tx hash from the drain window on Basescan.
• Token types: ETH, USDC, USDbC, memecoins, NFTs on Base.
• Whether you bridged from Ethereum or Coinbase before the incident.
• Revoke approvals at revoke.cash with Base network selected.

Common Base drain patterns

• Malicious dApp approval → automated token sweep.
• Phishing site mimicking Base memecoin launches.
• Social engineering “support” asking for seed phrase (not fixable on-chain).
• Fast DEX swap then outbound to labeled CEX hot wallet.

Trace with Tracefunds on Base

• Select Base on tracefunds.app/analyze?mode=incident&chain=base.
• $20 incident report — fund-flow graph, verification checklist, abuse pack copy.
• $5 single_tx — decode one suspicious hash before full wallet index.
• $10 approval audit — find standing permissions after a scare.

Bridge continuation

If stolen Base assets bridged to Ethereum mainnet, continue tracing on Etherscan with the same 0x address. Document both bridge tx hashes in exchange tickets.

Honest limits

Tracing shows public movement only — not guaranteed recovery. Avoid recovery scammers who target Base/Coinbase users after high-profile drains.