If the one don’t know your PIN code of the app, they can’t access to the crypto assets, but only get the physical part itself.
If the one not only possess your ChipBase Gift but also know the PIN code, then he/she will have full control of the ChipBase Crypto AngPao and of course the crypto asset inside.
It’s the same situation like any fixed assets in real life, if you lost your key/password of your car, your house, your bank account or your laptop, then some one get it can control it and you may suffer lost assets.