Kevin Durant Locked Out of Coinbase Bitcoin Account for 9 Years After 2016 Purchase
ConstrainedWallet passphrase was unavailable — access required significant recovery effort.
Kevin Durant purchased Bitcoin on Coinbase in September 2016 at approximately $650 per coin, following repeated conversations with Golden State Warriors teammates about cryptocurrency. Shortly after the purchase, Durant and his agent Rich Kleiman lost the login credentials to their Coinbase account. Without access to email recovery options, password reset procedures, or backup authentication methods, the account became functionally inaccessible despite remaining on an actively operating, custodial platform. The Bitcoin held in the account appreciated substantially through the 2017 bull market, the 2020–2021 surge past $60,000 per coin, and subsequent market cycles.
For nearly a decade—spanning roughly 9 years—the funds remained locked, their dollar value growing approximately 180 to 195 times from the original $650 purchase price. Coinbase, as a custodial exchange operator, possessed no mechanism to restore account access without proper identity verification and credential recovery, and Durant and Kleiman did not pursue recovery during the locked period. In September 2025, after nearly a decade of separation from the asset, Durant and Kleiman contacted Coinbase to attempt account recovery. Coinbase CEO Brian Armstrong publicly confirmed on September 19, 2025, via social media that the account recovery had been completed successfully.
Kleiman later reflected that the prolonged lockout may have inadvertently prevented premature liquidation during earlier market cycles. This case demonstrates a critical vulnerability in custodial exchange custody: accounts remain theoretically accessible and recoverable by the platform operator, but practical recovery is contingent on institutional cooperation, proper documentation of identity, and the exchange's continued operation and solvency.
| Stress condition | Passphrase unavailable |
| Custody system | Exchange custody |
| Outcome | Constrained |
| Documentation | Present and interpretable |
| Year observed | 2016 |
| Country | United States |
Why passphrases fail years after they are set
The failure mode documented consistently across observed cases is temporal: the passphrase is set with confidence, not used for an extended period, and then cannot be reproduced exactly when needed. A single character difference — different capitalization, an added space, a slightly different special character — produces a different wallet with a zero balance. The holder may be certain they remember the passphrase while being unable to produce the exact string that was originally set.
What makes this particularly difficult is that there is no signal at the moment of failure. A wrong passphrase does not produce an error message. It opens an empty wallet. The holder sees a zero balance and typically concludes the passphrase was wrong — but without knowing which part was wrong, or by how much.
Professional passphrase recovery services can attempt permutations when the holder has partial information: they remember the general structure, typical patterns they use for passwords, the approximate length, or that it included a specific word. Recovery from total non-recollection is not feasible.
The preventive action is to store a passphrase record — not with the seed phrase, which would defeat its security purpose, but in a separate secure location accessible to the holder and potentially a designated recovery person. A passphrase that exists only in memory has a time horizon: it will eventually be forgotten, and the timing is unpredictable.