SafePal Wallet has recently disclosed a data security incident. In a post, its official account stated that a vulnerability was found in an order-tracking plugin, which led to unauthorized access to some customersโ information.
According to the official statement, the incident affected approximately 39,798 customers, with the time window concentrated between March 2, 2025, and April 11, 2026. The exposed information includes: names, email addresses, shipping addresses, phone numbers, and purchase details, among others.
SafePal has since implemented additional security measures to complete the fix and has sent separate email notifications to all affected customers. The company stated that it will continue to release the latest updates on the investigation.
From a userโs perspective, the following steps are recommended for the potentially affected users:
1. Watch for whether you received an official SafePal email notification, and be cautious of phishing emails impersonating customer support.
2. For the email addresses and passwords involved, change them promptly and enable two-factor authentication.
3. Be wary of unknown calls or text messages claiming โorder issues,โ and avoid any further disclosure of personal financial information.
4. Monitor ongoing investigation updates through official channels and check whether additional identity protection measures are required.
Wallet security is not only about protecting on-chain assetsโevery plugin and third-party component in the user experience can also become an attack surface. This incident once again highlights to the entire Web3 industry: security audits for front-end components cannot be overlooked.
#SafePal #้ฑๅ
ๅฎๅ
จ #Web3