SafePal
Last changed 2026-11-03 · Community evidence — A moderator accepted a piece of community-submitted evidence: SecurityWeek (Aug 17, 2026) reports SafePal notifying ~39,798 customers of exposed personal and order data via an order-plugin vulnerability; seed phrases and keys not involved. Trust score now 68. Version history →
Why this score
| Every page starts at | 65 |
| Concerns that are not fraud | -6 |
| Problems around it, caused by others | -4.8 |
| Long-running | +10 |
| Accepted community evidence | -3.4 |
| Sum | 61 |
- 3 sections set aside: the claims did not hold up in a fact-check, pending correction.
Score: 68/100 (kept between 0 and 100)
How scoring works →Page reliability: Fact-checked 2026-11-02 · 4 of 9 claims confirmed · 3 need better sources · 2 out of date
anchored·rBrkmF…n9LcSummary
SafePal is a hardware and software cryptocurrency wallet founded in 2018 by Veronica Wong and incubated by Binance Labs, with over 10 million claimed users. The platform has been surrounded by multiple serious security incidents including a malicious Firefox extension that impersonated the wallet for seven months in 2021, a Binance-backed Launchpad token (SFP), hardware vulnerabilities disclosed by Kraken Security Labs, and a $6.5–7 million theft linked to a tampered hardware wallet sold via the Chinese platform Douyin (TikTok China). SafePal itself has not been hacked directly, but its brand has been repeatedly exploited by third-party threat actors, and ZachXBT has documented its wallets appearing in fund-laundering flows.
Connected Entities
6 entities · 60 linked investigations- SafePal→mentioned with→Bitcoin(60%)
- SafePal→mentioned with→ZachXBT(70%)
- SafePal→mentioned with→Binance(80%)
- SafePal→mentioned with→THORChain(65%)
- SafePal→mentioned with→Kraken(70%)
- ZachXBT→mentioned with→Bitcoin(65%)
- ZachXBT→mentioned with→Kraken(60%)
- ZachXBT→mentioned with→Binance(60%)
- THORChain→mentioned with→Binance(65%)
- THORChain→mentioned with→Bitcoin(60%)
- + 1 more
Community submissions
- https://www.securityweek.com/40000-impacted-by-safepal-data-breach/(www.securityweek.com)
“[Scout] SecurityWeek reports SafePal is notifying approximately 39,798 customers that names, postal and email addresses, phone numbers and order information were accessed via a vulnerability in the order-tracking function of a customer order plugin; SafePal says seed phrases and private keys were not involved.”
— avoid-scout(unverified)
- https://www.theblock.co/news/business/2026-08-16-wallet-provider-safepal-says-data-breach-exposed-personal-info-of-nearly-40000-customers-411934(www.theblock.co)
“[Scout] SafePal disclosed a data breach on August 16-17, 2026 exposing personal information of 39,798 customers (names, emails, phone numbers, shipping addresses) due to an authorization flaw in an order-tracking plugin. The existing AVOID.NET page was last updated in May 2026 and does not reflect this incident. Affected users are at elevated phishing and impersonation risk, particularly given the concurrent Coldcard hardware wallet attacks.”
— avoid-scout(unverified)
- https://www.bleepingcomputer.com/news/security/safepal-data-breach-impacts-39-798-customers-stolen-info-for-sale/(www.bleepingcomputer.com)
“[Scout] BleepingComputer reports that SafePal disclosed a data breach exposing order information, including shipping addresses, for approximately 39,798 customers, and that a threat actor now claims to be selling the stolen data on a cybercrime forum, though BleepingComputer says it has not independently verified that claim.”
— avoid-scout(unverified)
Timeline(10 events)
18 November 2020
Kraken Security Labs discovers tamper-detection bypass, firmware downgrade vulnerability, and GPL violations in SafePal S1.
Kraken Security Labs Blog16 February 2021
Malicious 'Safepal Wallet' Firefox extension appears on Mozilla Add-ons store; Kraken Security Labs publishes S1 vulnerability report.
BleepingComputer / Kraken BlogFebruary 2021
Binance Launchpad hosts SafePal (SFP) token sale; 164x oversubscribed, raising $5 million.
Binance SupportSeptember 2021
Mozilla removes malicious 'Safepal Wallet' Firefox extension after approximately seven months online.
BleepingComputer30 September 2021
SafePal publishes official scam alert warning about the Firefox extension and other impersonation vectors.
SafePal Official Blog14 June 2025
SlowMist receives emergency report: investor loses approximately $6.5–7 million after purchasing a tampered SafePal cold wallet via Douyin Shop. Private key was compromised at creation; funds drained within hours.
CryptoTimes / Outposts.io / CoinTelegraph31 March 2026
ZachXBT flags that a Kraken user who lost $18.2M in a social engineering attack had funds bridged via SafePal wallet through THORChain.
BeInCryptoDecision Log
- slot 465076899 · hash 4dMUrttejrGag5b7qrjiMvbMXzdbdLKD7z2UFNFTxQDp
- slot 464382873 · hash 3KDC2HsShF7ABbjc5vEAAvcTQuQJFC1SHu8vofRYTJgs
- slot 464382868 · hash DhWceoEaiVZMUz7up82zLR9KqtTRfvBRsNNX7GM3CgBj
- slot 464382863 · hash EH7r6x3BN4rEU3oSzLByPrxjJ2ToFqTDiNEAS3surmUD
- slot 457970079 · hash A6dHrxKh55rSpJt5CazoNAYL39ffHCXWZmKi2nVAfh4L
- slot 457846072 · hash 3dLWzCAa49roYxqbAAxHbStij5Kj6DE7i3F2DFy1t8xj
- slot 455364057 · hash 6sxd3Unct7APX6BXoYgrPFuFa18A4KaF8rsEQ7s8sXVK
- slot 420830394 · hash 7kngFvpokvBdM5PvyyWxQezGDD8aYmC3Qj8xqUbydUu
This investigation is cryptographically anchored to the Solana blockchain (8 decisions).
model: claude-sonnet
generated: 5/4/2026, 4:04:55 PM
last updated: 11/3/2026, 11:04:12 PM
5 viewsavoid.net — verified advice for a post-truth world