SafePal Data Leak Exposes Address Info for 40,000 Customers
A bug in SafePal's order-tracking software exposed customer names, phone numbers, and physical addresses.
Advertising disclosure: we may earn a commission when you join an operator via links on this page, at no cost to you. This never dictates our ratings. How we make money
Key takeaways
- A third-party order-tracking plug-in caused a data breach at SafePal.
- Names, phone numbers, and physical addresses of nearly 40,000 customers were exposed.
- The leak raises immediate fears of targeted phishing and physical attacks against users.
An unpatched vulnerability in an order-tracking plug-in tied to wallet provider SafePal just exposed personal information belonging to nearly 40,000 customers.
The incident leaked names, phone numbers, and physical shipping addresses. Crucially, SafePal's core wallet software and private keys weren't touched. But tying real-world addresses to crypto ownership creates immediate, tangible risks for anyone on that list.
History shows hardware wallet data leaks carry ugly consequences. Bad actors routinely parse exposed shipping logs to stage targeted phishing scams, coordinate SIM swaps, or worse, execute physical home invasions to force funds out of victims.
Why it matters
Your front door is usually the weakest link in your threat model. Cold storage isolates your keys from the web, but exposed logistics data draws a direct line to your living room. Buying hardware wallets or crypto gear straight to your house is a bad habit. Use a PO box and a burner phone number. That isn't paranoia anymore—it's basic operational security.
Source: Decrypt
Top Crypto Casinos Right Now
🇯🇵 Showing sites that accept players from Japan Change country
Advertising disclosure: we may earn a commission when you join an operator via links on this page, at no cost to you. This never dictates our ratings. How we make money
More info Less info
Why we chose it: A US-facing book that pays a premium for crypto deposits: 125% against 100% for cash, with fee-free deposits across five coins.
- KYC
- Required
Restricted countries: Australia, Afghanistan, Bulgaria, Central African Republic, Congo - Brazzaville, Eritrea, France, Guinea-Bissau and 16 more.
More info Less info
Why we chose it: BetNow's casino floor with the biggest match bonus we list. The 200% headline deserves a careful read of the code terms behind it.
- KYC
- Required
Restricted countries: Australia, Afghanistan, Bulgaria, Central African Republic, Congo - Brazzaville, Eritrea, France, Guinea-Bissau and 16 more.
More info Less info
Why we chose it: A US-oriented casino that turns away only New Jersey. The cashier takes crypto, but the site publishes fewer specifics than any operator we list.
- KYC
- Required
Restricted countries: New Jersey (US).
Daniel Okoro
Daniel tracks crypto regulation and policy across the US, EU and Asia, with a decade in financial journalism.
