Rotki Founder Says Gnosis Pay Exposed His Address, Card and Wallet Details

Gnosis Pay issues debit cards that let holders spend crypto balances through linked wallets, bridging self-custody with everyday payment rails. The breach hit the 'legacy system' behind its consumer-facing B2C cards, the older infrastructure predating a separate, unaffected enterprise platform. Unauthorized access occurred Nov. 3, with public disclosure following three days later on Nov. 6, a gap that drew scrutiny given how much personal data was exposed in the interim.

Funds staying safe does not erase the deeper problem: a product marketed around self-custody still depends on a centralized backend holding names, addresses and wallet links in one place. Pairing a home address with a crypto wallet address is a physical security risk that pure on-chain theft isn't, and no amount of 'customer funds were not affected' language resolves that. The breach is a reminder that the weak point in crypto-finance hybrids is often the plain old database, not the blockchain. (per protos.com)

Gnosis Pay has set Dec. 20 as the date its consumer card platform closes, with extra security checks staying in place until then. Whether the company discloses the total number of affected customers, or faces regulatory follow-up over the three-day gap between detection and notification, remains the open threads to track. The shutdown date effectively caps how long exposed data stays live within the product itself, though not what already left the system. (per thedefiant.io)