A Coinbase shareholder filed a derivative lawsuit on March 3, 2026 in a New Jersey federal court, naming CEO Brian Armstrong and several current and former executives as defendants. The complaint alleges they failed to disclose custodial risk, token compliance issues, and anti-money-laundering failures across the period from April 2021 to June 2023.

The suit was filed by shareholder Kevin Meehan and names Armstrong, co-founder Fred Ehrsam, Chief Legal Officer Paul Grewal, CFO Alesia Haas, and multiple board members. It covers the period from Coinbase's April 2021 Nasdaq direct listing through June 2023. Because it is a derivative action (a lawsuit brought on behalf of the company rather than for individual gain), any financial recovery would flow to Coinbase as a corporation, not directly to the filing shareholder. The complaint demands damages, a clawback of insider compensation, corporate governance reforms, and a jury trial.

Three Core Allegations

The complaint targets three categories of alleged misconduct. On custody disclosures, Coinbase's Retail User Agreement described retail holdings as "custodial assets held by Coinbase for your benefit."

The lawsuit argues this language concealed a serious legal risk: in a bankruptcy scenario, customer funds could be treated as property of the company's estate, leaving users as general unsecured creditors rather than protected depositors. The complaint further alleges that Coinbase maintained a two-tier system never disclosed to everyday users, with segregated custody structures for institutional clients while commingling retail funds.

That alleged concealment takes on added weight given Armstrong's own public statements. In May 2022, Armstrong posted on social media claiming that "Coinbase has no risk of bankruptcy," a statement the complaint cites in the context of the disclosure timeline and executive awareness.

On token listings, the suit alleges Coinbase made tokens available for trading despite internal awareness that regulators could classify them as unregistered securities. The SEC filed an enforcement action on those grounds in June 2023, though it was ultimately dismissed in 2025 following a shift in SEC enforcement posture under the new administration. New Jersey's Bureau of Securities separately imposed a $5 million penalty on the exchange for listing unregistered securities.

On AML compliance, the complaint draws directly from a $100 million settlement Coinbase reached with New York's Department of Financial Services in January 2023. Regulators found the exchange had accumulated a backlog of more than 100,000 unreviewed transaction monitoring alerts by the end of 2021, alongside more than 14,000 customers awaiting enhanced due diligence checks. Coinbase hired over 1,000 contractors to clear the backlog, but the company failed to provide adequate training or oversight to those contractors. A third-party audit found that more than half of 73,000 alerts reviewed by certain contractors failed quality checks.

The settlement required a $50 million penalty and a separate $50 million investment in compliance infrastructure over two years, plus the appointment of an independent monitor for at least one year.

NYDFS Superintendent Adrienne A. Harris described "significant failings" in Coinbase's compliance program at the time of the settlement. The DFS investigation found "wide-ranging and long-standing failures" across Coinbase's know-your-customer, transaction monitoring, and suspicious activity reporting systems.

Coinbase responded with a full statement: "As the most popular crypto exchange in the US, we are at times the target of meritless litigation like this. We are confident in our position and look forward to defeating this lawsuit."

A Delaware Case Is Already Moving Forward

The New Jersey filing comes as a related case in Delaware, originally brought in April 2023 by shareholder Adam Grabski, continues to advance through the courts.

That lawsuit alleges insiders sold approximately $2.9 billion in COIN stock while aware of the company's regulatory exposure. Armstrong personally sold roughly $292 million in shares; board member Marc Andreessen sold approximately $119 million. Plaintiffs allege insiders collectively avoided around $1.09 billion in losses through those sales.

On January 30, 2026, Delaware Chancellor Kathaleen St. Jude McCormick denied the defendants' motion to dismiss, citing what she described as "troubling connections" between a member of Coinbase's Special Litigation Committee and Andreessen Horowitz, a major Coinbase backer and the firm associated with named defendant Marc Andreessen.

The timing of a more recent stock sale has also drawn attention. CLO Paul Grewal sold approximately $233,000 in COIN shares on February 27, 2026, four days before the New Jersey complaint was filed. No allegation of insider trading or improper conduct has been made in connection with this specific sale in the New Jersey case. COIN closed at $205.71 on March 5, down roughly 1.5% on the day, with no significant selloff attributable to the filing.

Implications for Users in South Asia and Africa

The custody disclosure failures at the center of this case carry practical weight for retail crypto users in markets where regulatory protections are still developing.

In India, where Coinbase registered and has been expanding since 2025, the structural risk mirrors the one alleged in the complaint. India's Insolvency and Bankruptcy Code treats crypto assets as property but does not explicitly enumerate virtual digital assets. In a platform insolvency, retail holdings could be swept into the company estate, leaving users with little recourse. Indian regulators including SEBI and the Financial Intelligence Unit have been tightening AML requirements for crypto exchanges; the NYDFS findings offer a reference point for what inadequate compliance looks like at scale.

Across sub-Saharan Africa, including Nigeria, Kenya, and South Africa, peer-to-peer crypto volumes rank among the highest globally. Users transacting on international platforms operate without the investor protections available in the US or EU. South Africa has required crypto asset service providers to register since 2023, and analysts expect regulators across the region to finalize compliance requirements through 2026. For developers building custody tools or payment applications in these markets, the case makes clear that boilerplate user agreements may not be sufficient. Disclosures about what happens to customer assets in a platform insolvency need to be explicit, not buried.

What Comes Next

The New Jersey case now enters early procedural stages. With the Delaware case already cleared to proceed after surviving a dismissal motion, Coinbase faces simultaneous legal exposure on two fronts. How courts assess the company's disclosures and compliance record during the 2021 to 2023 period may set precedent for how centralized exchanges communicate custodial risk to retail users worldwide, with consequences that could extend well beyond the company itself.