Gnosis Pay disclosed a breach of the legacy system supporting its branded debit cards after detecting unauthorized access on Nov. 3, according to The Block’s report published Nov. 7, 2026, at 02:57:56 UTC+8. Certain customer information was exposed, but the company said customer funds were not affected.
Containment and temporary payment checks
Gnosis Pay said it contained the incident within two hours, replaced compromised security credentials and addressed the vulnerability. Its enterprise platform, which powers white-label card programs, was untouched, according to the company.
The company made 3D Secure verification mandatory for online card payments until Dec. 20, when the affected legacy system was scheduled to be retired. The supplied report did not specify which customer information was exposed or how many customers were affected.
Other card-related security incidents
The Block placed the breach alongside other incidents involving crypto card infrastructure, distinguishing data exposure from unauthorized access to funds:
- Based: The company said an attacker accessed an internal dashboard used to manage its Visa card program on Oct. 5. Some customer data was exposed, but the attacker reportedly failed to access deposited funds.
- Rain: In August, a vulnerability in its Solana card infrastructure allowed unauthorized withdrawals from card balances belonging to users of Tria and Avici.
- Revolut: The company said an unauthorized third party used a fraudulent request from a legitimate government email domain to obtain sensitive customer information. That information potentially included account statements, identity documents and Bitcoin transaction histories. Customer funds and systems were unaffected.
These incidents involved different kinds of exposure; Gnosis Pay’s account of its own breach concerned customer information, not a loss of customer funds.
Original source: The Block, published Nov. 7, 2026, at 02:57:56 UTC+8.