Based co-founder Edison said the company has contacted affected users after a recent card data leak and reported the incident to Singapore’s Personal Data Protection Commission and other relevant regulators. According to Odaily, the team has also filed a police report and is cooperating with law enforcement in the investigation.

Edison said the card business is still operating normally and that Based’s trading wallet and app were not affected. The wallet uses a self-custody model, with the platform not holding users’ private keys, and its social login feature is supported by Privy.

He also said discussion about an administrator backend leak from five months ago was unrelated to the card data leak and did not contain any user data. The backend was an early development version of a hosted OpenClaw product tested internally in March 2026, and the team later decided not to launch it and stopped development.