We use cookies to personalise content and ads, to provide social media features and to analyse our traffic. We also share information about your use of our site with our social media, advertising and analytics partners who may combine it with other information that you’ve provided to them or that they’ve collected from your use of their services.
Necessary cookies help make a website usable by enabling basic functions like page navigation and access to secure areas of the website. The website cannot function properly without these cookies.
_cfuvidThis cookie is a part of the services provided by Cloudflare - Including load-balancing, deliverance of website content and serving DNS connection for website operators.
Maximum Storage Duration: SessionType: HTTP Cookie
__cf_bm [x7]This cookie is used to distinguish between humans and bots. This is beneficial for the website, in order to make valid reports on the use of their website.
CookieConsentStores the user's cookie consent state for the current domain
Maximum Storage Duration: 1 yearType: HTTP Cookie
Preference cookies enable a website to remember information that changes the way the website behaves or looks, like your preferred language or the region that you are in.
We do not use cookies of this type.
Statistic cookies help website owners to understand how visitors interact with websites by collecting and reporting information anonymously.
We do not use cookies of this type.
Marketing cookies are used to track visitors across websites. The intention is to display ads that are relevant and engaging for the individual user and thereby more valuable for publishers and third party advertisers.
We do not use cookies of this type.
Unclassified cookies are cookies that we are in the process of classifying, together with the providers of individual cookies.
List of domains your consent applies to: [#BULK_CONSENT_DOMAINS#]
Cookie declaration last updated on 8/12/26 by Cookiebot
[#IABV2_TITLE#]
[#IABV2_BODY_INTRO#]
[#IABV2_BODY_LEGITIMATE_INTEREST_INTRO#]
[#IABV2_BODY_PREFERENCE_INTRO#]
[#IABV2_BODY_PURPOSES_INTRO#]
[#IABV2_BODY_PURPOSES#]
[#IABV2_BODY_FEATURES_INTRO#]
[#IABV2_BODY_FEATURES#]
[#IABV2_BODY_PARTNERS_INTRO#]
[#IABV2_BODY_PARTNERS#]
About
Cookies are small text files that can be used by websites to make a user's experience more efficient.
The law states that we can store cookies on your device if they are strictly necessary for the operation of this site. For all other types of cookies we need your permission.
This site uses different types of cookies. Some cookies are placed by third party services that appear on our pages.
You can at any time change or withdraw your consent from the Cookie Declaration on our website.
Learn more about who we are, how you can contact us and how we process personal data in our Privacy Policy.
Please state your consent ID and date when you contact us regarding your consent.
Install NewsLayer
Get the app experience — one tap from your home screen, instant loads and breaking-news alerts.
Cryptocurrency wallet provider SafePal confirmed a security breach on Sunday involving unauthorized access to data for about 40,000 customers.
What Happened
SafePal said the incident did not involve any seed phrases, private keys, bank account details, payment card numbers or government-issued identification numbers.
The security flaw was identified in the order-tracking function for a plug-in related to customer order information.
“Information including name, email address, shipping address, phone number, and purchase details was accessed externally without authorization due to the flaw,” the hardware wallet firm revealed.
SafePal warned that the exposed order details could be used for targeted phishing and impersonation attacks, and urged customers to stay vigilant.
SafePal’s Response
SafePal said it has fixed the issue and introduced additional security measures. An independent third-party security firm is being hired to validate the fix and conduct a comprehensive review of SafePal’s order-processing systems.
Latest Private Market Opportunities
The company has also reduced the retention period for personal information in its system to 90 days, subject to applicable legal requirements.
SafePal added that it has established a dedicated support channel for this incident and has identified and informed all affected customers individually via email.
Founded in 2018, SafePal is the first wallet incubated and invested in by YZi Labs, formerly Binance Labs. In January 2025, YZi Labs said in a statement that it would ‘operate independently’ and expant investment focus beyond crypto and blockchain to include AI and Biotech.
Binance (CRYPTO: BNB) founder Changpeng Zhao reacted to the data breach, warning users to watch for phishing attempts.
Another Hardware Wallet Targeted
This incident marks the latest in a string of hardware wallet security breaches.
Earlier this month, attackers drained 1,404.43 BTC—worth roughly $89 million—from Coldcard hardware wallets. The company subsequently halted all shipments and destroyed the remaining inventory carrying the compromised firmware.
A hardware wallet is a physical device that stores your cryptocurrency private keys offline, claiming stronger protection against malicious software and online thieves.
