SafePal data leaks nearly 40,000 user information exposed

SafePal disclosed on August 16 that the order information of nearly 39,798 users was exposed due to authorization flaws in the order tracking plug-in. The affected records cover orders made between March 2, 2025 and April 11, 2026, including names, email addresses, mailing addresses, phone numbers and purchase details. SafePal said it has sent emails to affected customers and launched tools to allow buyers to check orders using the order number and mailing country. The wallet provider confirmed that mnemonics, private keys, wallet passwords, payment card numbers, bank account information and government-issued ID numbers were not exposed. SafePal also said it did not find that the incident affected wallet access or customer funds. The company has fixed the vulnerability and introduced additional access controls. SafePal emphasizes that users do not need to transfer assets due to the exposure of order information, but if a mnemonic or private key has been entered on a suspicious website, the wallet should be regarded as having been compromised and a new wallet should be created to transfer remaining assets.