Gnosis Pay Reports Unauthorized Access to B2C Card System
TREE NEWS reports: Gnosis Pay, the payments arm of the Gnosis blockchain ecosystem, disclosed that its monitoring systems detected unauthorized access on November 3 to the system supporting its branded consumer cards (B2C business line). The breach resulted in the exposure of some customer information, though user funds were not affected, the company said in a blog post.
The team began remediation within two hours of detection, replaced compromised security credentials, and patched the vulnerability. The enterprise platform supporting all white-label card programs was not impacted.
Scope and Response
Gnosis Pay has emailed all affected users detailing the specific information leaked. As a precaution, it has enforced 3D Secure verification for all online card payments, a measure that will remain in place until the B2C system is retired as planned on December 20. The company also warned users to be vigilant against phishing attempts and never to share seed phrases, private keys, PINs, or full card numbers.
The incident highlights the operational risks facing crypto-linked payment providers, which bridge on-chain assets and traditional card rails. While no funds were lost, the exposure of personal data can fuel social engineering attacks. Gnosis Pay’s swift containment and transparent communication may help limit reputational damage, but the episode underscores the need for robust security across both crypto and fiat infrastructure.
Industry Implications
As crypto payments gain traction, such breaches could erode user trust and attract regulatory scrutiny. The decision to enforce 3D Secure and sunset the affected B2C system suggests a strategic pivot toward enterprise offerings, where security requirements are often stricter. Competitors and partners should take note: security incidents are not isolated to DeFi protocols but extend to the hybrid systems that connect digital assets to everyday spending.
Looking Ahead
Gnosis Pay’s planned retirement of the B2C system by December 20 will likely consolidate its focus on white-label solutions. Users should monitor accounts for suspicious activity and remain cautious of phishing. The broader industry must continue investing in threat detection and incident response to maintain confidence in crypto payments.
