Crypto: XBase is licensed by Dubai
The case is interesting precisely because XBase is not presented as an unlicensed crypto operator. Dubai had already demonstrated its firmness when VARA ordered KuCoin to halt unauthorized activities. XBase is in a different situation: the official register of the Virtual Assets Regulatory Authority confirms that its license is active.
The company obtained its authorization on March 19, 2026, under reference VL/17/03/001. It may provide broker-dealer services, but within a specific scope: only OTC spot trading for institutional and qualified investors.
This detail changes how the case should be viewed.
At this stage, the available sources do not say that VARA sanctioned XBase or that its authorization was suspended. The official register continues to show its status as active. The dispute concerns separate legal proceedings.
According to publications citing Takyon.Law, a separate enforcement order linked to the same judgment was also reportedly issued against an individual identified as Michael King. However, they provide no further information about the origin of the AED 27.2 million claim.
This silence matters. Based on the published information, it is impossible to attribute the judgment to a trading loss, settlement default, commercial debt or any other cause.
A license does not cover counterparty risk
This is where the case becomes much more relevant for crypto companies.
A license makes it possible to verify that a company is authorized to conduct certain activities and falls within a regulator’s scope. It does not guarantee that no commercial dispute, contractual issue or credit risk will arise.
XBase acknowledges this in its own contractual terms. For its OTC operations, the company says it conducts a counterparty risk review covering, among other factors, the client’s jurisdiction, business activity, ownership structure, expected volumes and reputation. It also sets exposure caps and trading limits.
The same logic should work in both directions.
A fintech choosing a liquidity provider should also know the exact legal entity with which it is signing. Within an international group, a single brand may encompass several companies established in different jurisdictions.
The question is particularly relevant for Africa. Nigeria’s crypto market now exceeds $92 billion, and an increasing share of its activity involves cross-border payments and settlements. Local companies may therefore depend more heavily on foreign brokers, custodians, exchanges and liquidity providers.
BusinessDay emphasizes this point in particular: the growth of crypto corridors between Africa and the Middle East increases the importance of conducting due diligence on these partners.
A fintech can verify a VARA license.
It still needs to read the contract.
Stablecoins make these checks more important
The problem will likely become more significant with stablecoins.
Nigeria already accounts for approximately 60% of stablecoin inflows into sub-Saharan Africa. Infrastructure connecting USDT or USDC with local currencies is expanding, creating ongoing needs for liquidity, conversion and settlement.
Several companies may be involved in this type of chain: a wallet, exchange, OTC broker, bank, liquidity provider and local payments infrastructure. A blockchain transfer may settle within seconds, while legal recourse between two companies may depend on a court located thousands of kilometers away.
Dubai already has significant experience with such disputes. In June 2026, for example, the DIFC Digital Economy Court issued a new judgment in the case involving entities linked to Huobi and Tabarak Investment Capital over an OTC bitcoin transaction. The decision specifically describes a structure in which several entities, wallets and contractual obligations were involved in settling a crypto transaction.
Blockchain therefore does not eliminate counterparty risk when an intermediary remains in the chain.
For an African company working with an international service provider, several checks become particularly important: which company is signing the contract, exactly what license does it hold, who holds the assets during settlement, what exposure limits apply, and which court has jurisdiction in the event of a dispute?
This requirement also accompanies the continent’s rapid professionalization. Rwanda went directly to study VARA’s regulatory model in Dubai to build its own supervisory framework.
The XBase case adds a useful nuance to this trend. Obtaining a license remains essential. Verifying a license is equally important.
But institutional due diligence begins precisely where that verification ends.
In brief
- Enforcement proceedings concern a judgment for AED 27.2 million, approximately $7.4 million, against XBase in Dubai.
- The available sources do not specify the nature of the dispute that led to the judgment.
- XBase still holds an active VASP license from VARA.
- Its license covers only OTC spot trading for institutional and qualified investors.
- No published information supports presenting the case as a VARA sanction.
- The case primarily highlights the difference between regulatory compliance and commercial counterparty risk.
