Most crypto cards ask you to send money to an exchange and trust it to convert the funds before each purchase. The Gnosis Pay Card keeps your balance in a personal smart contract on Gnosis Chain and draws on it at the moment you pay. That is a real difference from the cards it competes with, and it is also why the exploit that hit dozens of Card Safes in June 2026 matters. Around the design sit a €30 annual fee and rewards counted in cents and tied to holding GNO. The card works only in Europe for now.
What the Gnosis Pay Card is
The card comes from the GnosisDAO team, the group behind Safe (formerly Gnosis Safe), the CoW Swap trading protocol and the Gnosis Chain network. Safe holds funds for large DAOs and DeFi protocols, and Gnosis Pay builds on it with a Card Safe: a personal smart contract wallet created for each user. A smart contract runs a fixed set of rules on a blockchain with no company in the middle, which is why a wallet like this can hold your money and release it at the moment of a payment without anyone approving the transfer.
The card runs on Visa, a network with more than 80 million merchants. It works in the European Economic Area, the UK and Switzerland. The creator names the US, Mexico, Brazil and Asia as the markets next in line, and points out that Visa does not work in Russia, so readers there cannot use the card at all.
By mid-2026, more than $100 million had passed through the system and more than 50,000 accounts had been opened. Both figures are cumulative: they say how much has been processed since launch, not how much sits in Card Safes today. I would read 50,000 accounts as an early number, not as evidence that the card is widely used.
How a payment works, step by step
Most of the work happens before you tap the card.
- Sign up at gnosispay.com and complete the KYC checks, the identity verification card issuers have to run before they hand anyone a card.
- Get your Card Safe, the personal smart contract wallet built on Safe.
- Top up with a SEPA transfer to the personal IBAN the service gives you.
- Let the system mint EURe into the Card Safe once the euros arrive.
- Tap the Visa card at a payment terminal.
- The system checks the balance on Gnosis Chain in real time and debits the amount from the smart contract.
- Look the transaction up in a block explorer, the same way you would check any other operation on the network.
EURe is a euro stablecoin from Monerium, pegged one to one to the euro. A stablecoin holds a steady price because an issuer keeps reserves behind it, so the token in your Card Safe is meant to be worth the same as the euro it tracks. The card also takes GBPe, a pound token, and USDCe, a bridged version of Circle's USDC, all on Gnosis Chain. USDCe is bridged, which means it stands in for an asset from another network rather than being native to Gnosis Chain.
I like that the last step is public. The balance the terminal draws on is one anyone can look up, which is a different experience from reading a number inside an exchange app.
Where the money sits, and why it matters
Most crypto cards work the way exchange cards do: you send funds to the exchange or a payment provider, it converts them to fiat before each transaction, and the balance sits on the company's books. In that setup you are an unsecured creditor. If the company fails, you queue up with everyone else who is owed money. The creator names Binance, Bybit, Crypto.com and Coinbase cards as examples.
Gnosis Pay is built the other way round. Funds stay in your contract until the moment of purchase, and the creator's claim is that if the project shut down tomorrow, the money would still be in your contract and you could withdraw it without anyone's permission.
That holds only if the contracts keep working, if you can still reach Gnosis Chain to move the funds, and if no bug lets someone else move them first. The June exploit tests the last point. Self-custody cuts both ways in ordinary use too: nobody can freeze your balance, and nobody can reverse a transfer you got wrong.
The creator cites a score of 4.7 out of 5 in independent ratings for trust in custody, and argues that Gnosis Pay is the only product on the market where transactions settle on the public blockchain instead of being converted to fiat behind the scenes. Settlement you can check yourself is the strongest part of that pitch, and the rating is someone else's summary rather than a guarantee. If the contract is the only thing between you and your money, the quality of that contract is the whole product.
What the card costs
The annual fee is €30. The creator reports no FX fees and describes the commissions as zero beyond that. For anyone spending in more than one currency, the missing FX markup is the part that matters, because those markups are where many travel cards earn their money back.
The €30 is worth putting next to the cashback. At one euro cent per euro spent, you need €3,000 of spending in a year to cover the fee. At four cents, you need €750. Neither number is hard to reach if the card becomes your daily spender, but neither is automatic, and the top rate needs a GNO holding most people would not carry.
Cashback tied to your GNO balance
Cashback depends on how much GNO you hold in the Card Safe, not on how much you spend. The creator gives these rates.
| GNO held in the Card Safe | Cashback per €1 spent |
|---|---|
| 0.1 to 1 GNO | €0.01 |
| 10 GNO | €0.03 |
| More than 100 GNO | €0.04 |
| Any tier, with an OG NFT | plus €0.01 |
Tokens are not locked. Sell and the tier recalculates automatically, so there is no staking period to wait out and you hold the token only as long as you want the rate.
Four cents on the euro is a 4% rebate, high for a payment card. I would still read it as a discount on spending rather than a reason to buy GNO. The top rate depends on holding more than 100 GNO, and that holding can fall in price while it sits in the wallet. A 4% rebate does not cover a double-digit drop in the token, and nothing in the setup protects the value of the GNO itself. If you would hold GNO anyway, the cashback is a bonus on top. If you would buy it only for the cents, the trade is a lot less attractive than the headline rate suggests.
The June 2026 exploit
In early June 2026 an attacker found a vulnerability in the Delay Module, the component that holds transactions for a set period and gives the system time to block suspicious ones. By manipulating the signature check, the attacker queued malicious transfers from dozens of wallets and let them execute once the delay ran out. About $265,000 left in euros and GNO.
Gnosis Pay restored service for the vast majority of users, replaced the compromised contracts and promised to compensate losses in full. A postmortem was promised too. The creator's read is that the sum is not the point: the safeguard itself was the way in, and the flaw sat in a module that had already been audited.
Audits reduce the chance of a bug; they do not remove it, and a card that asks you to trust code instead of a company's balance sheet asks you to accept exactly this kind of failure. A promise to make users whole is a promise, not a guarantee, and it depends on the team's ability and willingness to pay. The size of the loss reflects how much sat in the affected wallets, not how well the design held up.
White-label cards for other companies
Alongside the consumer card, the team is building infrastructure other companies can plug into. Wallets and fintechs can connect through an API and launch their own branded stablecoin card with KYC, IBAN and Visa access already in place. The creator describes the offer as white label with KYC out of the box.
The same contract code and settlement rails will then sit behind more products, which matters if you are judging the card you can actually order: the code you are trusting will be reused. A security record gets more valuable as the surface grows, and a second incident would be harder to explain away than the first.
Risks I would weigh before signing up
Contract risk is not theoretical. The June exploit hit a protection module, the part you would least expect to fail, and anyone who puts a meaningful balance in a Card Safe is trusting code that has already been broken once.
Token exposure comes with the reward. Cashback rates are set by how much GNO you hold, so the card pushes you to keep a volatile asset in the same wallet you spend from. I would decide on the GNO holding separately and not size it around the cashback.
Tax is the one people forget. In many countries, spending crypto counts as a disposal, so every card payment can create a taxable gain or loss based on the value at the time. That turns a coffee into a small accounting event. Keep a record of each payment and its value in your local currency, and check the rules where you pay tax before the first transaction, not after.
The peg is another. EURe is designed to hold one euro, and a stablecoin holds its value only while its issuer's reserves and redemption process work as advertised. That is a different risk from holding euros in a bank, and it is worth knowing who issues the token you are loading.
Privacy comes last. KYC ties your identity to the wallet, and the wallet's spending is public on Gnosis Chain, so anyone who connects the two can see where the card is used. A bank card does not give strangers that view.
What to check before you order one
If you live outside the EEA, the UK or Switzerland, the card is not open to you yet, whatever the roadmap says about the US, Mexico, Brazil and Asia.
Read the fee schedule on Gnosis Pay's site for ATM withdrawals, spending limits and any issuance charge. The €30 annual fee and the missing FX markup are only part of what a card costs.
Decide your GNO position before you apply. Work out whether you would hold the token without the cashback, and pick a tier you can live with if the price falls. If the answer is no, use the card for what it is, a way to spend stablecoins from your own wallet, and treat the cents as a rounding error.
Keep the Card Safe topped up with what you plan to spend in the next month or two. Cashback follows the GNO holding, not the balance, so a large float earns nothing extra and sits in a contract the whole time.
Check the site address before you connect a wallet or type bank details, and start with a small top-up. The first SEPA transfer will tell you how long funding takes and whether the EURe arrives as expected, and a small test costs little if something goes wrong.
Gnosis Pay promised a postmortem and full compensation in June 2026. Whether the replacement contracts fix only the Delay Module or the rest of the code around it is the question I would want answered before a meaningful balance goes into a Card Safe.
