Coinbase says it wasn’t breached, but hackers don’t need to steal crypto to hurt users