The cryptocurrency platform Based has provided a formal update regarding a recent data breach involving its cryptocurrency card services. Co-founder Edison confirmed on October 12, 2026, that the company has initiated comprehensive response protocols, including formal reports to the Personal Data Protection Commission (PDPC) and law enforcement agencies. While the breach has impacted a specific segment of the user base, the platform’s core trading infrastructure remains secure and functional.
Regulatory Response and Operational Status
Following the identification of the security incident, the Based compliance and operations teams have been actively communicating with affected individuals. The company has fulfilled its legal obligations by notifying relevant regulatory bodies to ensure transparency throughout the investigation. Despite the breach, the cryptocurrency card business continues to operate normally, with the team focusing on mitigating risks for the impacted users.
Security of Wallets and Third-Party Integrations
A critical aspect of the report highlights that the platform's trading wallet and mobile application were not compromised during the incident. This resilience is attributed to the technical architecture of the platform:
- The wallet utilizes a self-custody model, ensuring that the platform does not hold or manage private keys.
- Social login functionality is managed by Privy, maintaining a layer of separation between authentication and sensitive data.
- Users are encouraged to continue trading on the Based platform as usual, as these systems remain isolated from the breach.
Clarification on Internal Systems
Edison also addressed rumors regarding a potential management backend leak from earlier in the year. The team clarified that a system mentioned in external reports was an early OpenClaw management product prototype used for internal testing in March 2026.
This system is unrelated to the cryptocurrency card business and does not contain customer data. Development on that prototype was halted shortly after the testing phase
The clarification aims to distinguish between deprecated internal tools and the current production environment used by active customers.
In the immediate term, Based has prioritized providing direct support to affected cardholders while simultaneously tightening team security controls. The company intends to implement more rigorous internal audits to prevent future unauthorized access to its service modules.
Frequently Asked Questions
Quick answers to the most common questions about this topic.
For educational purposes only. Nothing here constitutes financial or investment advice. Crypto markets are highly volatile — always DYOR before making any decisions.
Fact-checked per our editorial policy. We maintain strict independence from advertisers. Spot an error? Let us know.