Skip to content

Company

SafePal

SafePal is a crypto wallet company offering hardware and software wallets for storing and managing digital assets, backed by Binance Labs and founded in 2018.

Known aliases

  • @SafePal
  • SafePal - Crypto Wallet
  • SafePal – Crypto Wallet
  • SafePal Wallet

Current stories

investConfirmed4 publishers

A hardware wallet's real attack surface is its order database, not its air gap

Roughly 40,000 SafePal customers had names, addresses and payment methods exposed, according to Crypto Briefing; the air-gapped device held, the shipping list did not.

Perspective Coverage

4 publishers
Builder
Builder 24%
Operator
Operator 55%
Investor
Investor 21%

Reality

Evidence75
Adoption
Not scored
Hype gap+10
Incentives40
Confidence70
securityConfirmed8 publishers

SafePal's leaked order book is a target list: 39,798 wallet buyers, with addresses

No seed phrases were touched. What was taken is names, phone numbers and shipping addresses for people known to own a hardware wallet, now advertised on a crime forum.

Perspective Coverage

8 publishers
Builder
Builder 21%
Operator
Operator 70%
Investor
Investor 9%

Reality

Evidence62
Adoption
Not scored
Hype gap+10
Incentives55
Confidence68
investOne report1 publisher

Swiss Bitcoin Pay pulled its whole server fleet offline over five fields of customer data

The payment firm says its servers went dark on September 14 after an intruder probably reached internal systems, and that customer emails, IBANs, transaction histories and hashed passwords may have been exposed.

Reality

Evidence34
Adoption38
Hype gap+18
Incentives68
Confidence45
investOne report1 publisher

Law-firm breach cases nearly doubled in the book of the firm that counts them

Greenberg Traurig says an intruder took client documents and posted them on the dark web. The doubling behind that story is nearly 60 law-firm matters inside BakerHostetler's 1,250-incident book for 2025.

Publishers:decrypt.co

Reality

Evidence52
Adoption63
Hype gap+22
Incentives62
Confidence55
investOne report1 publisher

Trezor's spoofed alert reused the language of the $112.7m Coldcard exploit

The email telling Trezor owners their recovery phrases might lack entropy came from a real trezor.io address and passed DKIM, SPF and DMARC, and it described a defect close to the one that took 1,778.84 BTC from Coldcard users.

Reality

Evidence42
Adoption55
Hype gap+22
Incentives58
Confidence45