Gnosis Pay
Visa card on self-custodial Safe smart accounts on Gnosis Chain, now focused on enterprise card programs for partner apps.
Security record: 1 incident · 1 own fault · 1 repaid in full- Visa card issued by Monavate, linked to a self-custodial Safe smart account on Gnosis Chain
- Spends EURe, GBPe or USDCe held in the Safe, depending on the card currency
- Card and web app stop at 23:59 UTC on 20 December 2026; withdrawals stay open with no deadline
- EUR cards can move to Rebind; USD cards to Picnic in Brazil or MiniPay elsewhere
- Physical card
- Free
- FX fee
- 0%
- ATM
- 5 free/mo (max 200), then 2%
- Custody
- Self-custody
- Issuer
- Monavate Limited
We score a card only when its custody, cashback and FX fee are confirmed. Dropping them would reward cards that disclose least. How we score
- Custody 10.0
- Self-custody is a 10, a custodial balance is a 4.
- FX and conversion 10.0
- Base tier: no fee is a 10, 3% in FX and conversion together is a 1.
- Export your transaction history and note your card's last four digits and expiry date
- Move recurring payments to another card
- Withdraw EURe, GBPe or USDCe to a Gnosis Chain address you control
- Keep some xDAI in the owner wallet to pay gas
- Optionally move to a partner app such as Rebind, Picnic or MiniPay
The consumer card stops working at 23:59 UTC on 20 December 2026 and physical cards cannot be reactivated. Funds stay in your self-custodial Safe, but after the cutoff you withdraw with the owner wallet and xDAI for gas, and partner apps come with new terms of their own.
1 incident · 1 own fault · 1 repaid in full
Past incidents 1
Zodiac module signature flaw drained about $1.5M. An attacker forged approvals through an ERC-1271 check flaw in the Zodiac Delay and Roles modules used by Gnosis Pay card Safes, extracting about $1.5M with about $300k more made inaccessible. Gnosis absorbed the losses and restored all user funds; service came back for 99% of users by June 6. Post-mortem: Gnosis absorbed the losses and all funds were restored to users. https://gnosispay.com/blog/post-mortem-gnosis-pay-vulnerability-exploit
Own faultRepaid in full
Sources: gnosispay.com, theblock.co, thedefiant.io
From the project’s statements and security coverage. Own fault means the project’s code, servers or keys; third party means a vendor, registrar, oracle or issuer it relies on.
