Gnosis Pay

Gnosis Pay is a decentralized payment network that enables users to spend self-custodied crypto assets directly via Visa debit cards. Its core value proposition is eliminating the need for custodial intermediaries: funds remain in users' Safe smart contract wallets, and spending limits and delays are enforced on-chain. This solves the market pain point of trusting exchanges or card issuers with funds, while also removing prefunding requirements for businesses—settlement happens at the moment of spend.

In the first half of 2026, Gnosis Pay faced a significant security incident. On June 1, attackers exploited a vulnerability in the Zodiac-based Delay and Roles modules, compromising certain user wallets and extracting approximately $1.5 million, with an additional $300,000 rendered inaccessible. The team quickly paused card services, coordinated with partners to isolate attacker addresses, and ultimately restored all user funds. By June 6, services were fully restored for 99% of users. The incident led to a comprehensive security review, expansion of audit scope, and a full rebuild of the product (v2) with improved observability. No users lost funds permanently, and the team has committed to ongoing security enhancements.