There is a basebuilder master-pw that is created when you deploy the base.
You likely have a secondary Pw. So very likely the builder is taking your funds. There is nothing you can do about it because he can grant himself docking access and has full command of the base settings.
