Exchange Ranking
Top Exchanges
24h Volume Ranking
Popularity Ranking
Exchange BTC Balance
Proof of Reserves
Decentralized Exchanges
Funding Rate
Funding Heatmap
Liquidation Data
Max Pain
Long/Short Ratio
Whale L/S Ratio
Binance/Okex/Huobi L/S
Bitfinex Margin L/S
ETF Tracker
Solana ETF
XRP ETF
Hong Kong ETF
Bitcoin Treasuries
Crypto Reversal
Ethereum Reserves
HyperLiquid Wallet Analysis
Hyperliquid Whale Watch
Large Transactions
On-chain Movement
Bitcoin ROI
Stablecoin Market Cap
Options Analysis
News
Articles
Economic Calendar
Features
Wallet
Contract Calculator
Security
Collections
Watchlist
FollowingBasedApp hacked: Customer data breach raises concerns about new UK tax rules
BasedApp announced on Thursday that its internal systems had been penetrated by intruders, resulting in the leakage of sensitive information such as some customers 'home addresses and encrypted wallet addresses. The incident coincides with a recent proposal by the UK Revenue Office (HMRC) to amend existing laws to give it broader access to customer data. Critics point out that the data breach is a microcosm of the risks that the bill may increase if it is passed.
Details of the stolen data
BasedApp disclosed via TokenPost on October 8 that its internal operating systems were breached by unauthorized personnel. The stolen records include names, date of birth, nationality, home address, passport or Singapore national ID numbers, email addresses and telephone numbers, as well as customers 'wallet addresses.
According to reports, BasedApp previously completed a US$11.5 million Series A financing led by Pantera Capital and said it has more than 100,000 registered users. However, the company has not disclosed the number of customers affected by the leak, nor has it confirmed whether funds have been transferred.
Sensitive timing and UK tax controversy
The timing of this leak is quite embarrassing for the UK Revenue and Customs Service (HMRC). On July 13, HMRC released draft legislation amending its Information and Inspection Powers in Schedule 36. The draft was released as part of the fiscal year 2026-2027 fiscal bill document to solicit technical opinions, and the consultation period ended September 7.
就在草案发布的同一天，英国加密货币税务公司 Recap 提交了反对意见。其首席技术官 Ben Shepheard 指出，新规则将允许 HMRC 向任何“提供与加密资产相关服务”的个人发出强制性记录调取要求。这意味着 HMRC 有权从钱包软件、区块浏览器、数据供应商和硬件钱包制造商处调取记录，尽管这些机构并不持有客户的资产。
Shepheard 强调，此类通知无需法庭批准或纳税人同意，且不可上诉。Recap 还指出，修订后规则的适用范围将远超英国现有的加密资产报告框架（Cryptoasset Reporting Framework）规定。
数据安全警示
Recap 对法律的反对也源于对数据安全的关切。他们援引了 2024 年的一起案例，据称法国税务管理局的一名员工出售了已申报加密持有者的姓名、地址和钱包余额。此外，Recap 还提及了 2026 年 1 月发生在法国加密税务软件提供商 Waltio 的一次数据泄露事件，导致 5 万名用户的盈亏情况和余额暴露，随后黑客组织发起了勒索。
加密行业数据泄露的风险升级
Data shows that the risk of data leakage in the encryption industry is becoming increasingly serious. In September, IDScan.net was accused of being linked to a cybercrime forum that claimed to have more than 170 million identity documents. Coinbase has disclosed that a threatening actor bribed overseas support contractors to extract customer data, including passport and driver's license photos.
Trezor's fulfillment partner ShipMonk was also compromised, affecting approximately 80,700 users, and the attacker used the vulnerability to obtain a list of names and home addresses. In addition, Cryptopolitan has tracked a rising trend of violent crimes known as "wrench attacks" in which victims are attacked or kidnapped and forced to transfer their cryptographic assets.
In France alone, there have been 77 crypto-related kidnapping, detention and extortion cases or attempts as of the end of June, compared with 45 cases in all of 2025. In the UK, Crimestoppers is offering a £ 10,000 reward for information about a home invasion near Birmingham in December 2025.
Regulatory Call
Faced with these risks, Recap called on HMRC to tighten the wording of the bill to clearly stipulate that when historical sales data is sufficient to meet demand, users 'current positions and wallet addresses are not "reasonably necessary" information. At the same time, Recap requires HMRC to obtain court approval before issuing any notice.
