SafePal Wallet has recently disclosed a data security incident. In a post, its official account stated that a vulnerability was found in an order-tracking plugin, which led to unauthorized access to some customers’ information.
According to the official statement, the incident affected approximately 39,798 customers, with the time window concentrated between March 2, 2025, and April 11, 2026. The exposed information includes: names, email addresses, shipping addresses, phone numbers, and purchase details, among others.
SafePal has since implemented additional security measures to complete the fix and has sent separate email notifications to all affected customers. The company stated that it will continue to release the latest updates on the investigation.
From a user’s perspective, the following steps are recommended for the potentially affected users:
1. Watch for whether you received an official SafePal email notification, and be cautious of phishing emails impersonating customer support.
2. For the email addresses and passwords involved, change them promptly and enable two-factor authentication.
3. Be wary of unknown calls or text messages claiming “order issues,” and avoid any further disclosure of personal financial information.
4. Monitor ongoing investigation updates through official channels and check whether additional identity protection measures are required.
Wallet security is not only about protecting on-chain assets—every plugin and third-party component in the user experience can also become an attack surface. This incident once again highlights to the entire Web3 industry: security audits for front-end components cannot be overlooked.
#SafePal #钱包安全 #Web3