Track market-moving stories before they get noisy

Close-up of hands of a man viewing balances of Bitcoin, Ether and other cryptocurrencies in a wallet app from popular service Coinbase, Martinez, California, June 26, 2019. (Photo by Smith Collection/Gado/Getty Images)

Getty Images

"Scammers can use the leaked information to send fake emails, make fake phone calls, send fraudulent letters, or potentially impersonate banks, crypto exchanges, or even Trezor," the hardware wallet manufacturer warned customers on Aug. 13, disclosing a breach at one of its shipping providers.

"SafePal leaked 39,798 users today. not keys - names, emails, addresses," the analyst who posts as @dealerdefi wrote on X three days later. "your keys aren't the weak point, you are."

"To be clear, our systems were not compromised, and your Trezor device is secure," Trezor said, putting the exposure at 11,742 customers whose addresses leaked, plus 1,947 partly affected.

"We have some difficult news to share," the company wrote on X the same day, naming seven affected countries and orders placed between May 10 and Aug. 8.

ShipMonk "has also received extortion emails from the ShinyHunters extortion gang," BleepingComputer reported, tracing the intrusion to a critical SQL injection zero-day in Metabase.

'An isolated case at the time'SafePal disclosed its own breach on Aug. 16, saying it got a first report in early May but "treated it as an isolated case at the time," opening a full review only in July.

An authorization flaw in an order-tracking plug-in exposed roughly 39,798 customers of the Binance-backed wallet maker, putting 53,487 wallet buyers into circulation across the two disclosures in four days. "No evidence has been found that the incident itself compromised access to SafePal wallets or funds," SafePal said.

MORE FOR YOU

Attackers run the numbers"So you think about like attackers, what are they? They're organizations, right? They have their own KPIs, they have their own goals, they go to an office, they have a strategy and they say okay this is a project and they calculate the ROI," Ido Sofer, founder of the key-management firm Sodot, said on the On The Margin podcast.

"If I put enough constraints and enough like security rails and in-depth security, so the cost is gonna be higher than my neighbor and the other company," Sofer said. "So probably they're gonna go there because the ROI is lower."

A leaked list of names and delivery addresses moves that calculation the other way. "Home invasions now account for 37% of incidents in 2026," Chainalysis wrote in an Aug. 6 report, up from 26% in 2023, counting 46 violent crypto-related incidents through late June, a pattern that also ran through this year's largest crypto thefts.

A French tax official near Paris "is alleged to have stolen and sold dossiers on high-net-worth crypto holders, which included their names, addresses, holdings, phone numbers, and tax records," Chainalysis wrote of a 2024 case. The crypto tax-reporting firm Waltio "disclosed a separate breach of some 50,000 users, creating yet more useful data for attackers."

Attacks in France ran at "roughly 4.6 per month in the first half of 2026," Chainalysis wrote, counting 30 publicly known incidents there against more than 70 in the tally of Interior Minister Laurent Nuñez. Four of the seven countries in the Trezor leak are European.

'A moving target'"The more assets you put in a centralized custodian, the larger the honeypot and larger the ROI from social engineering, physical engineering, digital engineering," Michael Tanguma, chief executive of the bitcoin custody firm Onramp, said in an interview. "There's a single point of failure whether it's Coinbase or yourself."

"All this stuff, the violent attacks, third party attacks," Tanguma said, arguing after a $130 million Coldcard hack that self-custody is "increasingly going to be untenable" for most holders. "And why? Because it's a moving target."

Ledger went through this in January, when its international e-commerce partner Global-e was breached. "Global-e does not have access to your 24 words, blockchain balance, or any secrets related to digital assets," Ledger said at the time.

What happened last time"This data breach has no link nor impact on our hardware wallets, the app or your funds. Your crypto assets are safe," Ledger said in 2020, after a breach exposed 272,000 records including names, phone numbers and addresses.

Victims got extortion letters demanding $700 to $1,000 in bitcoin under threat of doxxing. "You should be suspicious of receiving a free product in the mail that you didn't order," Ledger security chief Matt Johnson said in 2021, after others were mailed counterfeit Nano devices containing soldered flash drives that asked for the 24-word recovery phrase.

Ledger co-founder David Balland was later kidnapped for ransom in France. "Be suspicious of any communication that prompts immediate action or asks for personal information," Trezor told exposed customers. "Never enter your wallet backup on a website or share it with anyone."

Liquid GRAM Staking Is Now Live on SafePal SafePal has integrated Tonstakers, the largest liquid staking protocol on The Open Network, bringing GRAM liquid staking to the SafePal Earn section. You can now stake GRAM and earn up to 15% APY directly inside the SafePal mobile app and the SafePal S1 and X1 hardware wallet line.

The word that matters is liquid. Your GRAM secures the network and earns rewards, while your position stays represented by a token you continue to hold in your wallet. There is no lock-up period, and withdrawals can complete in minutes.

To get started, download or update the SafePal mobile app to V4.11.7 and open the Earn section.

Estimated APYUp to 15% APY, floating and auto-compounding every 18 hours and reflected in the value of tsTONCompoundingAutomatic on every 18 hour timeframe Minimum stake1 GRAMLock-up periodNoneWithdrawalMinutes via instant withdrawal (dependent on available liquidity)Available onSafePal mobile app (iOS & Android), SafePal S1, SafePal X1CustodyNon-custodial. Your keys never leave your device What Is GRAM? GRAM is the native cryptocurrency of The Open Network (TON), a layer-1 proof-of-stake blockchain built for speed, low fees, and mainstream reach through its integration with Telegram. GRAM pays for transactions, secures the network through staking, and carries governance rights.

Holding Toncoin? You already hold GRAM. On 15 June 2026 a community vote passed with 81.22% support to rename Toncoin to Gram and change the ticker from TON to GRAM. Only the name, ticker and logo changed. Your balance, wallet address and any existing staking position carried over untouched, and the blockchain is still called The Open Network.

Because TON is proof-of-stake, the network depends on validators locking up GRAM as collateral to process transactions. Those validators share their rewards with the holders who back them, which is what makes staking possible and what this integration gives you access to.

What Is Liquid Staking, and What Is tsTON? With native staking, your tokens are committed directly to the network for the duration of the staking term. That is a straightforward arrangement, and for holders with a long time horizon it works well. The trade-off is that the position stays committed until the network's unbonding period completes.

Liquid staking takes a different approach. When you stake GRAM through Tonstakers, the protocol issues you tsTON, a liquid staking token representing your share of the staking pool. Your GRAM goes to work securing The Open Network, and tsTON sits in your wallet as a claim on that position plus everything it earns.

What tsTON isA token representing your staked GRAM positionHow rewards accrueAutomatically, reflected in the value of your tsTONIs it transferable?Yes. tsTON is a standard token and remains yoursRedeeming ittsTON is redeemed for your original GRAM plus accrued rewardsDo you need to claim?No. Compounding is automatic every 18 hours. In simple terms, tsTON is a receipt that grows. You hand over GRAM, you receive tsTON, and the amount of GRAM that tsTON can be redeemed for increases as staking rewards accumulate. When you exit, you redeem your tsTON for GRAM, receiving back your original stake plus the rewards it has accrued.

GRAM Staking APY and Automatic Compounding SafePal GRAM staking currently offers an estimated 15% APY. This is a floating rate. GRAM staking yields move with the proportion of GRAM staked network-wide, validator performance, and transaction volume on The Open Network. It is not fixed or guaranteed.

How Compounding Works With the SafePal x Tonstakers integration in SafePal Earn, GRAM liquid staking compounds staking rewards continuously, every 18 hours. They accrue into your position as they are earned, so your balance is always working on itself.

You do not need to do anything for this. There is no claim button, no manual re-staking, no scheduled maintenance of your position. The APY figure quoted already reflects compounding, which is what distinguishes APY from a simple annual rate.

Estimated APY~15% APYRate typeFloating, varies with network conditionsCompoundingAutomatic and continuous every 18 hoursReward accrualContinuous every 18 hoursManual claimingNot requiredMinimum stake1 GRAMMaximum stakeNo cap Where GRAM Staking Rewards Come From GRAM staking rewards are generated by The Open Network itself, from two sources.

Network Emissions The Open Network issues new GRAM as a block reward to validators who process transactions during each validation cycle. Validators pass a share to the holders staking with them. This is the larger and steadier of the two components, and how proof-of-stake networks compensate validators for securing the chain

Transaction Fees Every transaction on TON pays a fee in GRAM, and a portion flows to validators and their stakers. This component scales with network usage, so the busier the network, the more fee revenue there is to share. The Catchain 2.0 upgrade in April 2026 cut fees roughly sixfold while raising throughput about tenfold, a deliberate trade favouring total activity over per-transaction revenue.

How to Stake GRAM on the SafePal Mobile App Staking takes under two minutes on iOS or Android.

Update the SafePal app. Update the SafePal App to V4.11.7 and above and access GRAM staking in the Earn section. Open the Earn section. Go to the wallet tab at the bottom, then the Earn tab at the top, and select GRAM staking. Enter your amount. There is a minimum stake of 1 GRAM, and you can stake any amount higher than that. Keep a small GRAM balance spare in your wallet to cover network fees. Confirm the transaction. It is signed locally on your device. A small TON network fee applies, paid in GRAM. Watch it compound. Rewards accrue automatically every 18 hours. No claiming required. Users can also refer to the written tutorial here for a step by step guide. How to Stake GRAM with the SafePal S1 and X1 Hardware Wallet GRAM staking is fully supported on the SafePal S1 and X1, making SafePal one of the few ways to run a liquid staking position from cold storage without a centralised platform or browser extension. The hardware wallet works alongside the mobile app: transactions are built in the app, then signed on the device itself.

Connect your hardware wallet. Ensure your S1 or X1 is paired and detected, and that both app and device firmware are current. Open the Earn section and select GRAM staking. Choose the GRAM staking product from your hardware wallet account. Enter your amount. There is a minimum stake of 1 GRAM, and you can stake any amount higher than that. Keep a small GRAM balance spare in your wallet to cover network fees. Review in the app, confirm on the device. The app displays the transaction for review. Your S1 or X1 prompts for physical confirmation, so press confirm on the device to sign. The transaction broadcasts. Your device signs inside its secure element and broadcasts to The Open Network. Rewards begin accruing and compound automatically every 18 hours. Hardware wallet security: Every staking and withdrawal transaction requires physical approval on the S1 or X1. Private keys remain offline in the secure element chipset and never touch your phone or the internet. No action can execute remotely, even if your connected phone is fully compromised. For anyone staking a meaningful GRAM position, this is the recommended setup.

Users can also refer to the written tutorial here for a step by step guide.

Non-Custodial GRAM Staking: SafePal vs Exchange Staking Most GRAM staking happens on centralised exchanges, which means the exchange holds the keys. Your stake is then only as secure as the platform holding it, and platform failure, frozen withdrawals, or insolvency put staked assets at risk in ways the blockchain itself does not.

SafePal GRAM staking is non-custodial throughout. Keys are generated and stored on your own device, transactions are signed locally, and neither SafePal nor Tonstakers takes possession of your assets at any point.

SafePal x TonstakersExchange GRAM stakingYou control private keysYesNo, held by exchangeNon-custodialYesNoHardware wallet supportYes, S1 & X1 with physical confirmationNoPosition stays liquidYes, via tsTONTypically lockedAssets at risk if platform failsNoYesWithdrawal controlOn-chain, minutes to ~18hSubject to exchange policyWhere it sitsSafePal Earn, alongside TRX stakingExchange earn product Start Staking GRAM on SafePal Today GRAM liquid staking is live in the SafePal Earn section, on the SafePal mobile app and the SafePal S1 and X1 hardware wallet. Stake any amount, earn up to 15% APY with compounding every 18 hours, keep your position liquid through tsTON, and withdraw in minutes, all without giving up custody of your assets.

Download the SafePal App →

Explore the SafePal S1 and X1 Hardware Wallet →

SafePal continues to expand the Earn section with vetted staking partners across more chains and assets, so you can put your portfolio to work without leaving SafePal or compromising on self-custody.

FAQs Q1. What is liquid staking?
Liquid staking lets you earn staking rewards without locking your capital away. When you stake GRAM through Tonstakers you receive tsTON, a token representing your staked position. Your GRAM secures the network and earns rewards, while tsTON stays in your wallet and remains transferable and redeemable.

Q2. What is tsTON?
tsTON is the liquid staking token issued by Tonstakers. It represents your share of the staking pool and accrues rewards automatically, so the amount of GRAM it can be redeemed for grows over time. When you withdraw, tsTON is redeemed for your original GRAM plus accumulated rewards.

Q3. How do I stake GRAM on SafePal?
Open the SafePal mobile app, go to the wallet tab at the bottom, then the Earn tab at the top, and select GRAM staking. Enter your amount and confirm. Rewards begin accruing immediately and compound automatically every 18 hours.

Q4. What is the GRAM staking APY on SafePal?
SafePal GRAM staking currently offers approximately 15% APY. This is a floating rate that varies with the network-wide staking ratio, validator performance, and transaction volume on The Open Network. It is not fixed or guaranteed. The figure reflects automatic compounding.

Q5. How often do GRAM staking rewards compound?
Approximately every 18 hours, or around 487 times per year, matching the rhythm of The Open Network's validation cycles. Compounding is automatic every 18 hours, so there is no claim button and no manual re-staking.

Q6. How long does it take to unstake GRAM?
Instant withdrawal returns your GRAM within minutes, drawing on available pool liquidity. 

Q7. Can I add to my stake after the initial deposit?
Yes. Top up at any time by repeating the staking flow. Additional GRAM begins earning from the moment it is deposited and joins the same compounding schedule as your existing balance. There is no maximum position size.

Q8. Can I withdraw part of my position?
Yes. You are not required to exit your entire position at once. Withdraw the amount you need and the remainder stays staked and earning.

Q9. Where do GRAM staking rewards come from?
Two sources. Network emissions, where The Open Network issues new GRAM as block rewards to validators who share them with stakers, and transaction fees, where a portion of the fees paid on every TON transaction flows to validators and their stakers.

Q10. Can I stake GRAM with the SafePal S1 or X1 hardware wallet?
Yes. GRAM staking is fully supported on the SafePal S1 and X1. Transactions are initiated in the SafePal mobile app and confirmed physically on the device. Private keys never leave the hardware wallet's secure element, making this the recommended setup for larger positions.

Q11. Is SafePal GRAM staking safe?
SafePal GRAM staking is fully non-custodial. Your private keys never leave your device, and neither SafePal nor Tonstakers takes possession of your assets. On the mobile app transactions are signed locally, and on the S1 and X1 every transaction requires physical confirmation on the device. 

Tonstakers is CertiK-audited and operates an active bug bounty. That said, staking on any proof-of-stake network carries protocol-level risks including validator slashing, and APY is variable.

Q12. What is the minimum amount of GRAM I can stake?
The minimum is 1 GRAM. There is no maximum. Keep roughly 1 GRAM spare in your wallet to cover network transaction fees.

Q13. Is GRAM the same as Toncoin?
Yes. GRAM is the token formerly known as Toncoin. On 15 June 2026 a community vote passed with 81.22% support to rename the token and change the ticker from TON to GRAM. Only the name, ticker and logo changed. Balances, wallet addresses and existing staking positions were unaffected, and the blockchain is still called The Open Network.

Q14. Can I stake other assets on SafePal?
Yes. GRAM liquid staking joins TRX staking in the SafePal Earn section. SafePal continues to add staking support for more chains and assets across both mobile and hardware wallets.

About SafePal: Founded in 2018, SafePal is a next generation non-custodial crypto wallet suite backed by Animoca Brands, Binance and Superscrypt. The suite empowers access to decentralized and centralized finance on 200+ blockchains across its hardware, software, and browser extension wallet solutions.

Encompassing a diverse mix of crypto asset management solutions like cross-chain swapping, trading and yielding tools, centralized exchange (CEX) mini programs, a fiat gateway and Mastercard for users — SafePal serves 30 million users globally across 200+ regions and countries in 16 languages.

SFP is a decentralized BEP-20 and ERC-20 token fuelling the SafePal ecosystem with various utilities such as discounts on SafePal products, staking boost and airdrop rewards, seamless conversion to gas tokens, and more.

Stay informed about SafePal →

About Tonstakers: Tonstakers is the largest liquid staking protocol on The Open Network, with over 120M GRAM in total value locked (~80% share of TON's LST market) and over 140,000 stakers.

It is non-custodial and independently audited. Users stake GRAM and receive tsTON in return, a liquid token that grows in value as rewards accrue every 18 hours, with no lock-up required.

Full Disclaimer The APY figure quoted is a floating estimate based on current conditions on The Open Network, including the network-wide staking ratio, validator performance, and transaction volume. It is subject to change without notice and is not a fixed or guaranteed return. 

GRAM liquid staking is provided through a third-party integration with Tonstakers. Instant withdrawal is subject to available liquidity in the staking pool, and standard withdrawal is bound by The Open Network's validation cycles. 

Proof-of-stake networks carry protocol-level risks including validator slashing. Use of tsTON in external DeFi protocols carries additional risks independent of staking and is not required to earn staking rewards. This article is for informational purposes only and does not constitute financial or investment advice. Always conduct your own research before making any financial decisions.

Regional restrictions: This feature is not available to persons located in, ordinarily resident in, or accessing it from the United States or the United Kingdom, or from any comprehensively sanctioned jurisdiction, currently including Cuba, Iran, North Korea, and the Crimea, Donetsk, Luhansk, Kherson, and Zaporizhzhia regions of Ukraine. Access may be geo-blocked.  

Not Investment Advice The information above does not constitute investment advice, financial advice, trading advice, or any other sort of advice and you should not treat any of the article's content as such. SafePal does not recommend that any cryptocurrency should be bought, sold, or held by you.

Cryptocurrency investment is subject to high market risks. Please invest cautiously. SafePal will not be responsible for any investment losses. SafePal will not be liable whatsoever for any direct or consequential loss arising from the participation of its activities. Do conduct your own due diligence and consult your financial advisor before making any investment decisions.

Non-Endorsement The appearance of a third party on SafePal and its activities does not constitute an endorsement, guarantee, warranty, or recommendation by SafePal. Do conduct your own due diligence before deciding to invest in any third-party projects or use any third-party services.