SafePal Confirms Unauthorized Access to Approximately 40,000 Customer Order Records
SafePal has confirmed an incident of unauthorized access to customer order information. Approximately 39,798 customers have been affected. This incident stemmed from a flaw in the permission validation of a plugin linked to the order inquiry function, which allowed access to other customers' order information under certain conditions. The leaked information includes the names, email addresses, shipping addresses, phone numbers, and purchase histories of customers who placed orders between March 2, 2025, and April 11, 2026. SafePal emphasized that seed phrases, private keys, and wallet passwords are unrelated to this incident and stated that it does not collect or store such information. The leaked order information could be exploited for phishing and impersonation attempts, and customers are advised to be cautious of suspicious messages or websites. Affected customers received individual notifications via official email on the 16th, and a dedicated webpage has been set up to verify any potential damage. SafePal is currently working on fixing the flaw and conducting checks through external security firms, while also reducing the retention period for personal data to 90 days. Additionally, over 30 fraudulent websites and phishing links related to the incident have been blocked, and monitoring for new fraudulent activities is ongoing.
-- Price
This content is provided for general informational purposes only and doesn't constitute financial, investment, legal, or tax advice. Any events, rewards, online promotions, or related information mentioned herein should not be considered a recommendation, solicitation, or invitation to purchase, sell, trade, or otherwise deal in any crypto assets. Crypto assets are highly volatile and may result in loss. The availability of WEEX services, products, and related events may vary by region. You are responsible for ensuring that your participation is in accordance with applicable local laws and regulations.
You may also like

A Hole Punctured by a Dealer: A $100 Liability Cap Cannot Cover a $90 Million Loss

Ledger, Coldcard... Are hardware wallets still safe in 2026?

Trezor Investigates CryptoBilis Incident, No Issues Found

Cryptocurrency Security Guide: How to Identify and Prevent Social Engineering Attacks

Interview with a Renowned Crypto Analyst: Don't Expect Precise Bottom Calls, the 200-Week Moving Average Remains a Good Investment Opportunity

CZ Discusses Memestock Innovation, Senator Calls for Cryptocurrency Ban

Cold Storage of Bitcoins in 2026: Why Hardware Wallets No Longer Seem Invulnerable

SafePal is Screening Anti-Phishing Companies and Independent Security Agencies for Involvement

Web3 Wallets in a "Season of Turmoil": Understanding the Evolution of Crypto Security's "Sword and Shield" in the AI Era

Over 53,000 Crypto Owners Lost Something This Week That Isn’t Money

Hardware Crypto Wallets Have Gained Significant Popularity Among Russians

Data: The majority of the cryptocurrency market has declined, with the GameFi sector dropping over 5%, while only the CeFi and Meme sectors remain relatively strong

ZachXBT: A certain Kraken user is suspected of being a victim of social engineering fraud, resulting in a loss of 18.2 million dollars

Aster launches modular trading infrastructure Aster Code, collaborating with Binance Wallet, Trust Wallet, Genius Terminal, and others to build the ecosystem

SafePal Launches 2026 New Year Limited Edition Mastercard Design

Crypto Long and Short: Why Gold and Bitcoin Can Be in the Same Portfolio

No One Endorses a CEO or Founder They Don't Trust

Stricter Regulation May Lead Brazilian Crypto Market to a New Concentration Cycle

Ecuador Government Promotes Bitcoin Mining Amid Power Outages

Solana Sets a Date for Its Next Major Upgrade

Aurora Intents connects Solana wallets to Elara’s Ethereum yield

Stablecoin cards win users on FX savings, not rewards: Wirex CEO

MemeToro, Pump.fun, and Four.meme: Which token launch platform better protects buyers?

Ethereum's quantum race takes a new turn as zkSync courts banks and Starknet weighs exit

How AI Memecoins Differ from Classic Memecoins: A Look at MemeToro, DOGE, and PEPE

Ripple partners with DriveWealth for RLUSD settlement and global payments

Strive’s new $500 million Bitcoin financing plan comes with a $257 million annual dividend problem

G20 warns that stablecoins may lose value even if fully backed

Crypto wallets expand into DeFi hubs as swaps and yield move in-app





