Your home address, bank card, and wallet address may already be in someone else's hands 🦖
📈 进群一起分析行情
On November 6, the founder of open-source asset tracking tool Rotki publicly said he had received a notification from Gnosis Pay.
The notice said that the consumer card system had been accessed without authorization on November 3.
The leaked information included his home address, bank card details, and information related to his wallet.
Three days passed between the incident and its public disclosure.
What really sends a chill down your spine isn't the bank card.
It's that the home address and wallet address were included in the same leaked data.
A leaked bank card can be replaced. A leaked home address combined with a wallet address directly links a person to their on-chain assets.
This is not on the same scale as an account leak from an ordinary website.
Withdrawing from an exchange requires identity verification, and issuing a payment card does too.
Names, addresses, ID documents, bank accounts, and wallet addresses were supposed to be spread across several places.
A single crypto payment card brings them all together in one database.
What attackers get isn't a password—it's a complete profile of a person ⚖️
There's another line in the notice worth paying attention to:
Enterprise projects were not affected by this incident.
That suggests the systems were segmented, but the segmentation was designed to protect enterprise customers, while the consumer side was breached first.
That trade-off makes sense from a business perspective, but it's hard for users to accept.
Put this in the context of this month's timeline, and it looks even more alarming:
October 29: $6.3 billion was stolen from a leading platform. Security firms said hackers had accessed its systems eight weeks earlier.
November 4: An on-chain analytics company admitted that all users' names, usernames, password hashes, and active tokens had been leaked.
November 6: This payment card exposed users' home addresses and bank card details.
What all three incidents have in common is that none involved a smart contract being breached—the boundary between people and systems was broken first 💥
My take: self-custody wallets solve the problem of asset control, not identity anonymity.
As long as you spend with a card, someone has to store your real identity.
The real questions aren't whether it has been hacked, but how much data it stores, how long it keeps it, and how quickly it notifies users when something goes wrong.
There's not much you can do right now.
Check whether you've received a similar notice. If you have, replace your card first, then separate your everyday wallet from any wallet you've used for identity verification.
Don't keep large amounts of assets in a wallet that's frequently connected to a payment card.
Have you used a crypto payment card? Would you connect it to your everyday wallet? Share your thoughts in the comments.
Every day, I bring you the latest crypto market stories—not just what happened, but the logic and opportunities behind them 👀🚀
📈 进群一起分析行情
On November 6, the founder of open-source asset tracking tool Rotki publicly said he had received a notification from Gnosis Pay.
The notice said that the consumer card system had been accessed without authorization on November 3.
The leaked information included his home address, bank card details, and information related to his wallet.
Three days passed between the incident and its public disclosure.
What really sends a chill down your spine isn't the bank card.
It's that the home address and wallet address were included in the same leaked data.
A leaked bank card can be replaced. A leaked home address combined with a wallet address directly links a person to their on-chain assets.
This is not on the same scale as an account leak from an ordinary website.
Withdrawing from an exchange requires identity verification, and issuing a payment card does too.
Names, addresses, ID documents, bank accounts, and wallet addresses were supposed to be spread across several places.
A single crypto payment card brings them all together in one database.
What attackers get isn't a password—it's a complete profile of a person ⚖️
There's another line in the notice worth paying attention to:
Enterprise projects were not affected by this incident.
That suggests the systems were segmented, but the segmentation was designed to protect enterprise customers, while the consumer side was breached first.
That trade-off makes sense from a business perspective, but it's hard for users to accept.
Put this in the context of this month's timeline, and it looks even more alarming:
October 29: $6.3 billion was stolen from a leading platform. Security firms said hackers had accessed its systems eight weeks earlier.
November 4: An on-chain analytics company admitted that all users' names, usernames, password hashes, and active tokens had been leaked.
November 6: This payment card exposed users' home addresses and bank card details.
What all three incidents have in common is that none involved a smart contract being breached—the boundary between people and systems was broken first 💥
My take: self-custody wallets solve the problem of asset control, not identity anonymity.
As long as you spend with a card, someone has to store your real identity.
The real questions aren't whether it has been hacked, but how much data it stores, how long it keeps it, and how quickly it notifies users when something goes wrong.
There's not much you can do right now.
Check whether you've received a similar notice. If you have, replace your card first, then separate your everyday wallet from any wallet you've used for identity verification.
Don't keep large amounts of assets in a wallet that's frequently connected to a payment card.
Have you used a crypto payment card? Would you connect it to your everyday wallet? Share your thoughts in the comments.
Every day, I bring you the latest crypto market stories—not just what happened, but the logic and opportunities behind them 👀🚀