Exchange Ranking
Top Exchanges
24h Volume Ranking
Popularity Ranking
Exchange BTC Balance
Proof of Reserves
Decentralized Exchanges
Funding Rate
Funding Heatmap
Liquidation Data
Max Pain
Long/Short Ratio
Whale L/S Ratio
Binance/Okex/Huobi L/S
Bitfinex Margin L/S
ETF Tracker
Solana ETF
XRP ETF
Hong Kong ETF
Bitcoin Treasuries
Crypto Reversal
Ethereum Reserves
HyperLiquid Wallet Analysis
Hyperliquid Whale Watch
Large Transactions
On-chain Movement
Bitcoin ROI
Stablecoin Market Cap
Options Analysis
News
Articles
Economic Calendar
Features
Wallet
Contract Calculator
Security
Collections
Watchlist
FollowingBasedApp 安全漏洞致客户数据泄露，英国加密税务提案引发争议
服务于加密货币用户的数字资产平台 BasedApp 于周四报告称，未经授权的一方访问了其内部系统，并暴露了客户的个人及钱包详细信息。
数据泄露详情与影响
此次事件涉及敏感信息，包括客户的姓名、出生日期、国籍、居住地址、护照或新加坡国民身份证号码、电子邮件地址、电话号码以及钱包地址。BasedApp 于 10 月 8 日发布更新，确认其内部运营遭到入侵。截至目前，该公司尚未披露受影响的人数，也未澄清该事件是否导致客户资金发生变动。
BasedApp 是该领域的一家新兴初创企业，近期由 Pantera Capital 领投完成了 1150 万美元的 A 轮融资，注册用户数已突破 10 万。此次泄露事件引发了业界对加密平台数据保护的新关注，尤其是随着对加强内部安全保障措施的呼声日益高涨。
背景：英国税务机关拟议的数据访问权
此次安全事件发生时，英国税务海关总署（HMRC）正在考虑立法变更，以扩大其对加密用户数据的访问权限。作为《2026-27 年财政法案》的一部分发布的 HMRC 草案立法，旨在修订其附表 36 中的信息与检查权力。
Under the proposal, HMRC can issue data requests to any company that provides cryptographic asset services, ranging from wallet software, block browsers, data providers and hardware wallet providers. These mandatory requests do not require court approval or consent from affected taxpayers and are not appealable.
UK-based crypto tax software company Recap submitted a response to the proposal, arguing that its scope far exceeds the current "Crypto Asset Reporting Framework" rules in the UK. Ben Shephear, chief technology officer of Recap, warned that broader data access poses physical security risks if it leads to the exposure or misuse of user information. He pointed to several previous leaks in Europe, including the sale of tax data by insiders and major vulnerabilities in other crypto tax platforms.
Recap also mentioned an incident in January 2026 in Waltio, a French cryptographic tax software provider. Due to security negligence, the profits and balances of 50,000 users were leaked, and cybercriminals used this to demand ransom.
The company calls for pending legislation to explicitly exclude wallet addresses and current crypto positions from mandatory disclosure, citing the fact that such details are not necessary when historical sales data has been reported. Recap also recommends that any HMRC notification should be reviewed by a court.
Noun explanation:
HMRC (UK Revenue and Customs):The British government agency responsible for tax collection, regulation enforcement and payment of certain national benefits. Its activities in the crypto field focus on ensuring that individuals and businesses engaged in trading or investing in digital assets comply with tax law compliance.
Broader risks of encrypted data breaches
Cybersecurity experts and industry analysts continue to highlight the growing danger of data breaches in the cryptocurrency space. Such incidents have gone beyond the theft of digital assets and increasingly involve threats to personal safety.
Notably, IDScan.net appears in a cybercrime forum database that claims to contain more than 170 million identity files. Large leaks have also hit established companies such as Coinbase, where contractors provided sensitive documents, including passport and driver's license photos, for accepting bribes.
ShipMonk, a logistics partner of hardware wallet maker Trezor, also suffered an incident that affected approximately 80,700 people, resulting in users 'names and home addresses being exposed.
There is a rise in criminal activity associated with such leaks, including violent "wrench attacks," in which victims are physically attacked or kidnapped to force cryptocurrency transfers. As of the end of June, France had recorded 77 cases of kidnapping, detention and extortion involving cryptocurrencies, up from 45 in the whole of 2025. In the UK, Crimestoppers has offered a £ 10,000 reward for information about a home invasion robbery against crypto owners near Birmingham in December 2025.
Currently, the focus of debate in the UK industry is how to strike a balance between strengthening regulatory supervision and ensuring the data privacy and personal safety of encrypted users. As digital assets become increasingly mainstream, the impact of data breaches points to the industry's urgent need to improve security measures and develop clear regulatory standards.
