- SafePal disclosed that an order-tracking plug-in flaw exposed personal data of roughly 39,798 customers.
- Names, emails, shipping addresses, phone numbers, and purchase details were compromised; wallet credentials and financial data were not.
- Chainalysis documented 46 violent incidents and over $30 million stolen in the first half of 2026 as physical crypto attacks surge.
- Similar leaks at Trezor and Ledger have heightened risks for self-custody users.
SafePal, a Bitcoin and crypto wallet maker, said Saturday that a flaw in an order-tracking plug-in allowed attackers to access personal data for roughly 39,798 customers. The company disclosed the breach in a statement posted to X, saying affected orders were placed between March 2, 2025, and April 11, 2026.
The exposed data includes names, email addresses, shipping addresses, phone numbers, and purchase details. SafePal stressed that seed phrases, private keys, wallet passwords, bank details, payment card numbers, and government IDs were not involved.
SafePal, a non-custodial wallet suite backed by Binance and Animoca Brands that says it serves about 30 million users, said it has fixed the issue and notified affected customers by email. No funds were directly stolen.
However, the combination of home addresses and evidence of crypto ownership can guide criminals toward high-net-worth holders, and so-called wrench attacks are rising. Chainalysis documented 46 violent incidents and more than $30 million stolen in the first half of 2026, with home invasions increasingly overtaking kidnappings.
Meanwhile, SafePal joins a growing list of wallet firms hit by data leaks. Trezor recently disclosed that a breach at shipping partner ShipMonk exposed about 13,700 customers, while Ledger‘s 2020 leak of roughly 272,000 customers led to ransom threats.
The disclosure adds to anxiety for self-custody users after the Coldcard exploit drained long-dormant Bitcoin through a firmware entropy flaw and pushed industry-wide losses toward $130 million. SafePal apologized to its community and said it would post updates as its investigation continues.
✅ Follow BITNEWSBOT on Telegram, Facebook, LinkedIn, X.com, and Google News for instant updates.
Previous Articles:
- Greenlane’s $70M BERA Treasury Crumbles to $16M After 76% Drop
- Rebel Creamery hits bankruptcy after $23.785M lawsuit ruling
- DefiLlama delayed mobile launch over phishing apps on Apple Store, founder says
- Bybit adds Unitree, Moonshot AI to pre-IPO perpetuals
- Apple and Alibaba team up to launch AI in China
