How an insider-led breach sparked a costly scam at Coinbase