Coinbase accused of neglecting security, costing users up to $300M annually