Golden Finance reported that the SlowMist security team recently detected a risky behavior suspected of disguising itself as the official address of Coinbase (0xcd53b841ffa2afba778d03ef928cfe864accca7b). This address attempted to send false messages to users who withdrew large amounts of assets from Coinbase Prime through on-chain shouting. The content of the shouting falsely stated that "due to operational errors during the transaction, users are required to return all funds that were mistakenly transferred through ETH, otherwise law enforcement agencies will be contacted." We recommend that all users be wary of such phishing behaviors and verify the transfer information as much as possible before performing the transfer operation to avoid unnecessary asset losses.