Track market-moving stories before they get noisy

Not financial or tax advice. PANews content is strictly educational and informational and is not investment advice, financial advice, tax advice, legal advice, or a solicitation to buy or sell any digital asset, security, or financial product. Do your own research and consult qualified advisers.

Disclosure. PANews may publish sponsored content, partner content, advertisements, affiliate links, event promotions, and market commentary involving Web3 projects, service providers, or financial products. PANews personnel, contributors, or affiliates may hold digital assets or other interests related to covered topics. See our Terms of Service.

This site is protected by reCAPTCHA.

I don’t think Bitcoin is ever going to go back below $60,000. I think forever “I think the base case for Bitcoin is basically that you get higher lows, and you do have these run-ups that happen roughly every four years. I would say that… Read More

Read more in: Blockchain & Digital Assets, Featured Headlines, Fintech  |  Tagged alex svanevik, bitcoin, bitfinex, Gadi Chait, nansen, xapo bank

By Tony Zerucha  |  

New agentic AI services from TransFi, OSL Group and Ionic highlight this week’s fintech product release and partnership announcements. TransFi launches JARVIS, an AI-powered compliance intelligence platform JARVIS consolidates customer and transaction data from across its internal systems and third-party providers into a single, risk-based… Read More

Read more in: Artificial Intelligence, Blockchain & Digital Assets, Fintech  |  Tagged agentic payments, embedded finance, osl group, spend management, stablecoins, TransFi

By Omar Faridi  |  

The tokenized equities sector continues to expand as one of the more active areas within real-world assets, with platforms such as Ondo Finance, Binance’s bStocks, and xStocks accounting for the majority of current trading and investment activity. Recent data show the category’s share of the… Read More

Read more in: Blockchain & Digital Assets, Global, Investment Platforms and Marketplaces  |  Tagged binance, bStocks, ondo finance, rwas, tokenization, tokenized equities, xstocks

By JD Alois  |  

The Securities and Exchange Commission has charged an individual and three entities they controlled for selling pre-IPO shares at significant markups that were not disclosed. According to an SEC release, Andrew Spaventa and The Spaventa Group LLC, TSG Capital Advisors LLC, and TSG Alpha Partners… Read More

Read more in: Politics, Legal & Regulation  |  Tagged andrew spaventa, enforcement, fraud, private securities, sec

By JD Alois  |  

Plaid, an open banking/open finance enabler, has announced a partnership with Personetics in a move designed to provide “Open Finance Intelligence” to the banking sector. Plaid supports many Fintechs and established financial services platforms, streamlining applications like KYC, payments, and more. The company currently works… Read More

Read more in: Fintech, Artificial Intelligence  |  Tagged banking, open banking, personetics, plaid

DisclosureQuest

Promote Your
Reg A Offering

Get your message out
to more investors

Promote Now

By Omar Faridi  |  

SafePal, a provider of hardware and software cryptocurrency wallets, has publicly disclosed a security incident in which unauthorized parties gained access to personal and contact details belonging to roughly 40,000 customers. The company revealed the event on August 16, 2026, explaining that the exposure stemmed… Read More

Read more in: Blockchain & Digital Assets  |  Tagged hack, SafePal, security breach, wallet

By Omar Faridi  |  

Western Union (NYSE: WU) has secured a key regulatory green light from New York authorities for its planned purchase of International Money Express, commonly known as Intermex, yet the transaction now confronts fresh obstacles in California that could postpone its completion. The roughly $500 million… Read More

Read more in: Fintech, General News, Politics, Legal & Regulation  |  Tagged acquisition, california, intermex, new york, western union

By JD Alois  |  

Fireblocks, a blockchain infrastructure firm that safeguards digital assets, has enlisted the assistance of former US SEC Commissioner Elad Roisman. Over the years, Fireblocks has expanded its digital asset services beyond custody to include wallets, stablecoins, trading, tokenization, payments, and more. The company works with… Read More

Read more in: Blockchain & Digital Assets, Global, Politics, Legal & Regulation  |  Tagged elad roisman, Fireblocks, sec, switzerland

22h05 ▪ 4 min read ▪ by Mikaia A.

Summarize this article with:

The crypto wallet sector is facing a new data leak. SafePal confirmed on Saturday that a flaw affecting an order tracking plugin had allowed unauthorized access to information of 39,798 customers. The data concerns orders placed over more than one year and includes several personal details. However, no wallet identifiers, funds, recovery phrases or private keys were compromised, according to details provided by the company in its official announcement published on Saturday.

In brief A data leak affected 39,798 SafePal customers who placed an order between March 2025 and April 2026. Exposed information includes names, emails, delivery addresses, phone numbers and purchase details. Private keys, recovery phrases, passwords and crypto funds were not compromised according to SafePal. The incident follows leaks at Trezor and Ledger, while physical attacks on cryptocurrency holders are increasing. A flaw in the order tracking system In a statement published on X , SafePal declares that the breach concerns customers who made an order between March 2, 2025 and April 11, 2026. The attackers were able to view their names, email addresses, delivery addresses, phone numbers and purchase details. However, data directly related to the security of wallets remain outside the identified scope. Recovery phrases, private keys, passwords and wallet identifiers were not affected.

Similarly, SafePal specifies that bank details, card numbers and official identity documents remain protected. The company claims to have fixed the flaw and contacted the affected customers by email. It has also created a page allowing users to check if their data is among the exposed information. Finally, the company plans to publish new information on its blog during the ongoing investigation.

SafePal faces physical targeting risk after data leak Even without direct theft of cryptocurrencies, this leak raises a particular question for Bitcoin holders. The association between an identity, an address and a crypto purchase can provide useful clues to criminals. The risk takes on a more concrete dimension with the increase of physical attacks directly targeting holders. These assaults seek to obtain digital assets under threat or coercion.

Chainalysis recorded 46 violent incidents in the first half of 2026, with more than 30 million dollars stolen. According to available data, home burglaries are becoming more frequent than kidnappings. In this context, SafePal joins several manufacturers whose users have already suffered the consequences of a leak. A few days before this case, Trezor reported a compromise affecting about 13,700 customers after a flaw at its delivery partner ShipMonk.

A growing pattern of data leaks across the hardware wallet sector Ledger’s precedent remains more significant in its scope. Its 2020 data leak affected about 272,000 customers and caused a phishing wave. Some users also received ransom demands accompanied by threats of violence. More recently, the exploit affecting Coldcard further heightened concerns about the security of hardware wallets and self-custodied funds.

SafePal therefore intervenes in a period already marked by several incidents affecting crypto users. The company apologized to its community after discovering this exposure. It now states it wants to communicate new updates as its investigation continues. 

This communication also aims to specify the limits of the incident and to distinguish commercial data from elements necessary to access cryptocurrencies. Users thus have a clearer framework to assess their immediate exposure. The next steps will depend notably on technical conclusions and additional information that the manufacturer will publish. The affected customers will need to follow SafePal’s next communications to know the precise development of the case.

Maximize your Cointribune experience with our "Read to Earn" program! For every article you read, earn points and access exclusive rewards. Sign up now and start earning benefits.

Join the program

A

A

Lien copié

Mikaia A.

La révolution blockchain et crypto est en marche ! Et le jour où les impacts se feront ressentir sur l’économie la plus vulnérable de ce Monde, contre toute espérance, je dirai que j’y étais pour quelque chose

DISCLAIMER

The views, thoughts, and opinions expressed in this article belong solely to the author, and should not be taken as investment advice. Do your own research before taking any investment decisions.

Order-Tracking Flaw Exposed Nearly 40,000 CustomersCrypto hardware wallet provider SafePal has disclosed a security incident that put the personal data of nearly 40,000 customers at risk. SafePal identified an "authorization flaw" in a plug-in used to track customer orders, which likely allowed attackers to view other customers' order details. The vulnerability worked much like a parcel-tracking system that lets one customer see another's receipt and delivery information simply by changing the order number.

The breach affects customers who placed orders between March 2, 2025, and April 11, 2026, exposing their names, email addresses, shipping addresses, phone numbers, and purchase information. SafePal said it identified the root cause only recently, though customers had posted publicly online about being targeted by phishing attempts as early as May.

The company says the breach did not expose customers' wallet seed phrases, private keys, passwords, bank account information, payment card numbers, government-issued identification numbers, or other credentials. Customers whose order information was exposed do not need to replace their hardware wallets or move cryptocurrency because of the breach, according to SafePal. However, if a customer already shared their seed phrase or private key in response to a phishing email or text, they should treat their wallet as compromised and transfer any assets to a new wallet on a trusted SafePal device or official application.

SafePal Acts to Contain FalloutThe company notified all affected customers by email and hired an independent third-party security firm to audit the fix and review its order-processing systems. SafePal also confirmed it has identified and taken down more than 30 fraudulent websites and phishing links tied to the stolen data.

SafePal has launched an online verification tool that lets customers enter their order number and shipping country to determine whether the details of that order were stolen. Going forward, SafePal said it will retain customer personal data in its order-processing system for only 90 days from the date of collection.

SafePal warns customers to watch for targeted phishing emails and phone calls about firmware upgrades, product returns, refunds, or legal investigations. The incident is the latest customer-data breach involving a major hardware wallet brand, following Trezor's disclosure of a breach at ShipMonk, its shipping provider.

Sources:
BleepingComputer: SafePal data breach impacts 39,798 customers
CoinDesk: SafePal security vulnerability exposes data of 39,798 customers
The Block: Wallet provider SafePal says data breach exposed personal info of nearly 40,000 customers

Key Points Nearly 39,798 SafePal customers had their personal information exposed due to an authorization vulnerability in an order-tracking plugin Compromised data includes customer names, contact information, delivery addresses, and transaction details Wallet security remains intact—no private keys, seed phrases, or cryptocurrency funds were compromised SafePal has removed over 30 fraudulent websites created following the security incident The wallet provider is implementing stricter data retention policies and engaging external security auditors On August 16, SafePal, a cryptocurrency wallet service provider, announced that a security vulnerability in its order-tracking system resulted in unauthorized access to personal information of roughly 39,798 users.

Dear community,

While your SafePal wallet, seed phrase, and private keys are secure; we identified a flaw in the order-tracking plug-in that led to unauthorized access to information of a subset of customers.

The issue has been fixed with additional security measures…

— SafePal – Crypto Wallet (@SafePal) August 16, 2026

The security incident stemmed from an authorization vulnerability within a plugin designed for order tracking. This defect permitted, under specific circumstances, unauthorized individuals to view order information belonging to other customers.

The compromised data pertains to transactions processed between March 2, 2025, and April 11, 2026. Information exposed in the breach includes customer names, email contacts, telephone numbers, delivery addresses, and order specifics.

SafePal emphasized that critical security elements including seed phrases, private keys, wallet access passwords, payment card credentials, banking details, and government identification documents remained protected and were not part of the data exposure.

Additionally, the company stated that no evidence suggests any cryptocurrency wallets or user funds were directly accessed or compromised as a result of this security incident.

How the Security Incident Unfolded According to SafePal, the first indication of trouble came in early May when the company received a phishing complaint that aligned with the eventual problem, though it was initially handled as a single incident. A comprehensive security audit was subsequently initiated, and by July the company had begun overhauling its order-management infrastructure.

The underlying issue—the authorization flaw within the plugin—was identified during the July security review. User complaints on Reddit and Trustpilot regarding phishing attacks containing accurate personal information surfaced as early as July 3 and 4, several weeks prior to SafePal’s official public statement.

An additional technical error caused an automated data-deletion routine to malfunction from September 2025 through April 2026. While SafePal clarified this configuration issue did not enable the unauthorized data access, it resulted in customer records being retained beyond their intended storage period.

Ongoing Phishing Threats Targeting Affected Customers The primary concern for impacted users is the heightened risk of targeted phishing campaigns. With access to genuine customer names, addresses, and purchase information, malicious actors can create highly persuasive fraud attempts.

SafePal cautioned that cybercriminals may impersonate company representatives offering bogus firmware upgrades, reimbursements, or device replacements to trick users into revealing their wallet access credentials.

The company has successfully identified and removed more than 30 fake websites and phishing operations. SafePal continues active surveillance for additional fraudulent domains.

SafePal has directly contacted affected customers via email and created a verification tool enabling users to determine if their purchase was impacted by entering their order reference number and shipping location.

Users who may have already provided a seed phrase or private key to a questionable website should immediately consider that wallet compromised, establish a new wallet, and transfer any remaining cryptocurrency assets.

SafePal is engaging an independent cybersecurity firm to verify the effectiveness of its remediation efforts and perform a comprehensive security assessment. The company has also implemented a new 90-day retention policy for personal data within the affected system.

This security incident is part of a concerning pattern affecting hardware wallet manufacturers. A third-party shipping contractor breach recently exposed customer information for approximately 14,000 Trezor users. Earlier in the year, competitor Ledger also informed customers about a data exposure originating from its third-party e-commerce platform.

Across all these incidents, the affected companies maintained that wallet functionality and private cryptographic keys were never compromised.

In brief SafePal disclosed that an order-tracking plug-in flaw gave attackers access to personal data—names, emails, shipping addresses, phone numbers and purchase details—for roughly 39,798 customers. The exposed mix of addresses and proof of crypto ownership raises the risk of physical targeting as wrench attacks surge, with Chainalysis documenting 46 violent incidents and over $30 million stolen in the first half of 2026, on pace for a record year. SafePal joins a string of wallet firms hit by leaks—Trezor's recent ShipMonk breach exposed ~13,700 customers, and Ledger's 2020 leak of ~272,000 led to ransom threats. Bitcoin and crypto wallet maker SafePal said Saturday that a flaw in an order-tracking plug-in gave attackers unauthorized access to the personal information of roughly 39,798 customers, the latest breach to put a hardware wallet company's users at risk of being physically targeted.

In a statement posted to X, SafePal said the exposed data spans customers who placed orders between March 2, 2025, and April 11, 2026, and includes names, email addresses, shipping addresses, phone numbers, and purchase details.

Myriad: Bitcoin's next move? Click to make your prediction.The company stressed that wallet credentials themselves were untouched, saying seed phrases, private keys, wallet passwords, bank details, payment card numbers and government IDs were not involved. SafePal, a non-custodial wallet suite backed by Binance and Animoca Brands that says it serves 30 million users, said it has fixed the issue, notified affected customers by email, and set up a page to check exposure.

While no funds were directly stolen, the mix of names, home addresses, and evidence of crypto ownership is precisely the kind of data that can steer criminals toward high-net-worth holders. That concern has sharpened alongside a rise in so-called wrench attacks, in which victims are threatened or assaulted until they surrender their crypto.

Chainalysis documented 46 violent incidents in the first half of 2026 with more than $30 million stolen, calling the year on pace to be the worst on record, with home invasions increasingly overtaking kidnappings.

SafePal joins a growing list of wallet firms whose customers have been exposed through leaks. Just days earlier, hardware wallet maker Trezor disclosed that a breach at shipping partner ShipMonk compromised data on roughly 13,700 customers. The clearest cautionary tale remains Ledger, whose 2020 leak of some 272,000 customers' details led to a wave of phishing and, for some, ransom threats invoking violence.

The timing adds to a jittery stretch for self-custody users still shaken by the Coldcard exploit, which drained long-dormant Bitcoin through a firmware entropy flaw and pushed industry-wide losses toward $130 million.

SafePal apologized to its community and said it would post updates on its blog as its investigation continues.

Daily Debrief NewsletterStart every day with the top news stories right now, plus original features, a podcast, videos and more.

Close-up of hands of a man viewing balances of Bitcoin, Ether and other cryptocurrencies in a wallet app from popular service Coinbase, Martinez, California, June 26, 2019. (Photo by Smith Collection/Gado/Getty Images)

Getty Images

"Scammers can use the leaked information to send fake emails, make fake phone calls, send fraudulent letters, or potentially impersonate banks, crypto exchanges, or even Trezor," the hardware wallet manufacturer warned customers on Aug. 13, disclosing a breach at one of its shipping providers.

"SafePal leaked 39,798 users today. not keys - names, emails, addresses," the analyst who posts as @dealerdefi wrote on X three days later. "your keys aren't the weak point, you are."

"To be clear, our systems were not compromised, and your Trezor device is secure," Trezor said, putting the exposure at 11,742 customers whose addresses leaked, plus 1,947 partly affected.

"We have some difficult news to share," the company wrote on X the same day, naming seven affected countries and orders placed between May 10 and Aug. 8.

ShipMonk "has also received extortion emails from the ShinyHunters extortion gang," BleepingComputer reported, tracing the intrusion to a critical SQL injection zero-day in Metabase.

'An isolated case at the time'SafePal disclosed its own breach on Aug. 16, saying it got a first report in early May but "treated it as an isolated case at the time," opening a full review only in July.

An authorization flaw in an order-tracking plug-in exposed roughly 39,798 customers of the Binance-backed wallet maker, putting 53,487 wallet buyers into circulation across the two disclosures in four days. "No evidence has been found that the incident itself compromised access to SafePal wallets or funds," SafePal said.

MORE FOR YOU

Attackers run the numbers"So you think about like attackers, what are they? They're organizations, right? They have their own KPIs, they have their own goals, they go to an office, they have a strategy and they say okay this is a project and they calculate the ROI," Ido Sofer, founder of the key-management firm Sodot, said on the On The Margin podcast.

"If I put enough constraints and enough like security rails and in-depth security, so the cost is gonna be higher than my neighbor and the other company," Sofer said. "So probably they're gonna go there because the ROI is lower."

A leaked list of names and delivery addresses moves that calculation the other way. "Home invasions now account for 37% of incidents in 2026," Chainalysis wrote in an Aug. 6 report, up from 26% in 2023, counting 46 violent crypto-related incidents through late June, a pattern that also ran through this year's largest crypto thefts.

A French tax official near Paris "is alleged to have stolen and sold dossiers on high-net-worth crypto holders, which included their names, addresses, holdings, phone numbers, and tax records," Chainalysis wrote of a 2024 case. The crypto tax-reporting firm Waltio "disclosed a separate breach of some 50,000 users, creating yet more useful data for attackers."

Attacks in France ran at "roughly 4.6 per month in the first half of 2026," Chainalysis wrote, counting 30 publicly known incidents there against more than 70 in the tally of Interior Minister Laurent Nuñez. Four of the seven countries in the Trezor leak are European.

'A moving target'"The more assets you put in a centralized custodian, the larger the honeypot and larger the ROI from social engineering, physical engineering, digital engineering," Michael Tanguma, chief executive of the bitcoin custody firm Onramp, said in an interview. "There's a single point of failure whether it's Coinbase or yourself."

"All this stuff, the violent attacks, third party attacks," Tanguma said, arguing after a $130 million Coldcard hack that self-custody is "increasingly going to be untenable" for most holders. "And why? Because it's a moving target."

Ledger went through this in January, when its international e-commerce partner Global-e was breached. "Global-e does not have access to your 24 words, blockchain balance, or any secrets related to digital assets," Ledger said at the time.

What happened last time"This data breach has no link nor impact on our hardware wallets, the app or your funds. Your crypto assets are safe," Ledger said in 2020, after a breach exposed 272,000 records including names, phone numbers and addresses.

Victims got extortion letters demanding $700 to $1,000 in bitcoin under threat of doxxing. "You should be suspicious of receiving a free product in the mail that you didn't order," Ledger security chief Matt Johnson said in 2021, after others were mailed counterfeit Nano devices containing soldered flash drives that asked for the 24-word recovery phrase.

Ledger co-founder David Balland was later kidnapped for ransom in France. "Be suspicious of any communication that prompts immediate action or asks for personal information," Trezor told exposed customers. "Never enter your wallet backup on a website or share it with anyone."

Over 53,000 Crypto Owners Lost Something This Week That Isn’t Money

Published Mon, Aug 17, 2026 · 05:54 AM

CRYPTOCURRENCY wallet provider SafePal on Sunday (Aug 16) disclosed a data breach that involved unauthorised access to about 39,798 customers’ order information, including personal details such as names, addresses and purchase data.

An authorisation flaw in the order tracking system allowed access to another customer’s order information between Mar 2, 2025, and Apr 11, 2026, SafePal said in a statement.

SafePal provides a suite of secure crypto-management tools including hardware wallets, mobile and browser wallets to help people store and use digital assets, according to its website.

The breach did not involve access to “seed phrases”, private keys, wallet passwords, bank account and payment card information or government-issued identification numbers.

Wallet passwords are usually alphanumeric. The wallet provider also offers a set of randomised words, known as seed phrases, for additional security. Both of these are known only to the user. If customers lose the passwords and phrases, access to their wallets is cut off.

As a result of the breach, affected users’ order information could be used for targeted phishing and impersonation attempts, the firm said.

SEE ALSO

SafePal said it had fixed the issue and introduced further security measures in response, adding that it would retain customers’ personal data in its order processing system for only 90 days.

The crypto hardware wallet provider said it has identified and taken down more than 30 fraudulent websites and phishing links tied to the breach. REUTERS

TECHINASIA: SafePal discloses data breach affecting 39,798 customers

Not financial or tax advice. PANews content is strictly educational and informational and is not investment advice, financial advice, tax advice, legal advice, or a solicitation to buy or sell any digital asset, security, or financial product. Do your own research and consult qualified advisers.

Disclosure. PANews may publish sponsored content, partner content, advertisements, affiliate links, event promotions, and market commentary involving Web3 projects, service providers, or financial products. PANews personnel, contributors, or affiliates may hold digital assets or other interests related to covered topics. See our Terms of Service.

This site is protected by reCAPTCHA.

3 hrs ago

2 min read

Safepal reveals data breach. (Markus Spiske/Unsplash)Summary

SafePal disclosed a security breach that exposed the names, physical addresses and contact details of 39,798 customers who placed orders between March 2, 2025, and April 11, 2026.The company said no cryptocurrency funds, seed phrases, private keys, bank details or government IDs were compromised, but warned that exposed users face heightened phishing and impersonation risks.SafePal has taken several steps to address the situation. Crypto hardware wallet provider SafePal has disclosed a security incident that exposed the personal information of thousands of customers.

The exposed data included names, physical addresses, and contact details, putting affected users at risk of phishing and impersonation attempts. However, the breach did not compromise any cryptocurrency funds, passwords, or private wallet keys.

SafePal is a cryptocurrency security company that provides physical hardware wallets and software applications designed to help investors safely store and manage their digital assets.

The latest exploit follows a recent hack of Coldcard hardware wallets, in which the attacker reportedly stole at least $120 million in bitcoin. While the incidents do not necessarily point to a systemic weakness in hardware wallets, they show that no crypto-storage solution is entirely risk-free. They also validate calls to assess concentration risk and, where appropriate, to diversify both crypto holdings and the wallets used to store them.

What happened?SafePal said on Sunday that it identified an “authorization flaw” in a plug-in used to track customer orders. This flaw likely allowed attackers to see other customers’ orders. Think of it as a store’s parcel-tracking system allowing one customer to view another customer’s receipt and delivery details simply by changing the order number.

The breach has impacted 39,798 customers who placed orders between March 2, 2025 and April 11, 2026.

SafePal stressed that the core security of its wallets remains intact, adding that users’ seed phrases, private keys, bank passwords, bank account information, payment card numbers, and government-issued IDs were not affected.

However, SafePal said users who have shared their private keys or seed phrases via a phishing email, phone call, or letter should treat their wallet as compromised and transfer their assets to a new wallet.

How SafePal is respondingThe company said it had patched the vulnerability and introduced additional security measures in response. SafePal notified all affected customers by email from [email protected] on Sunday and hired an independent third-party security firm to audit the fix and review its order-processing systems.

SafePal also said it would retain customers’ personal data in its order-processing system for only 90 days from the date of collection. In addition, the company identified and removed more than 30 fraudulent websites and phishing links associated with the breach.

Customers can use a verification tool on SafePal’s website to check whether their data was affected, the company said.

12345678910

Building the Zcash Machine: Tachyon and Quantum Readiness

Building the Zcash Machine: Tachyon and Quantum Readiness

Zcash’s Tachyon upgrade aims to scale shielded payments, improve quantum readiness, and test whether its funding, security, and governance can hold.

Jun 30, 2026

Zcash’s Tachyon upgrade aims to scale shielded payments, improve quantum readiness, and test whether its funding, security, and governance can hold.

Why it matters:

Zcash’s Tachyon upgrade aims to scale shielded payments, improve quantum readiness, and test whether its funding, security, and governance can hold.

Cover image via U.Today

Disclaimer: The opinions expressed by our writers are their own and do not represent the views of U.Today. The financial and market information provided on U.Today is intended for informational purposes only. U.Today is not liable for any financial losses incurred while trading cryptocurrencies. Conduct your own research by contacting financial experts before making any investment decisions. We believe that all content is accurate as of the date of publication, but certain offers mentioned may no longer be available.

In a recent update, non-custodial wallet SafePal said it has identified a security incident involving unauthorized access to customer order information during a specific time frame.

A flaw in the order-tracking plug-in led to unauthorized access to information of a subset of customers. SafePal noted that order information for customers who placed orders between March 2, 2025, and April 11, 2026, including name, email address, shipping address, phone number, and purchase details, was accessed externally without authorization due to the flaw. The affected data involves about 39,798 customers.

Dear community,

While your SafePal wallet, seed phrase, and private keys are secure; we identified a flaw in the order-tracking plug-in that led to unauthorized access to information of a subset of customers.

The issue has been fixed with additional security measures…

HOT Stories

— SafePal - Crypto Wallet (@SafePal) August 16, 2026 All affected customers have been notified individually by email. The issue has been fixed with additional security measures introduced. A verification defect in the plugin for customers to track order progress has been identified and fixed.

SafePal noted that the security incident did not involve users' seed phrases, private keys, wallet passwords, or other wallet credentials, bank account information, payment card numbers, or government-issued identification numbers.

You Might Also Like

The wallet provider confirmed that hardware wallets, private keys, seed phrases, and crypto assets remain safe and unaffected. This is because cold storage architecture operates in an isolated environment, entirely separated from e-commerce servers. However, exposed order details may be used for phishing attempts.

What's next?SafePal outlined the affected information as including detailed purchase information such as users' names, contact details, shipping addresses, and order details; hence, affected customers might be targeted by more sophisticated phishing attempts.

You Might Also Like

These attempts may include fraudulent phone calls, emails, text messages, letters, refund offers, firmware-update requests, fake customer-support communications, malicious websites, or other attempts to obtain your wallet credentials or additional personal information.

In this light, SafePal urges all users to remain vigilant, as it will never ask for their 12/24-word recovery phrase, PIN, or private keys under any circumstances.

As the incident itself did not expose seed phrases, private keys, or wallet passwords, users might not need to move their assets. However, a crypto wallet may be compromised if the user has already shared or entered a seed phrase or private key in response to a suspicious message, website, phone call, or letter. If this is the case, they should create a new wallet and move their remaining assets immediately. 

REUTERS: Crypto wallet provider SafePal discloses data breach affecting nearly 40,000 users' order information

SafePal, a provider of non-custodial crypto wallets, reported that a technical vulnerability in its order-tracking plugin resulted in unauthorized external access to customer order details involving nearly 40,000 individuals.

Order information compromised via technical flawThe company discovered the security incident after identifying a flaw in the order-tracking plugin used on its e-commerce platform. This issue allowed unauthorized parties to access data belonging to customers who placed orders between March 2, 2025, and April 11, 2026. The compromised information includes names, email addresses, shipping addresses, phone numbers, and specific purchase details for 39,798 customers.

SafePal has stated that it notified all affected customers directly via email. The technical defect has now been resolved, and the company implemented additional measures to reinforce security around customer data. The vulnerability had permitted external access to order details but was unrelated to core wallet functions.

No wallet credentials, assets, or sensitive financial data affectedSafePal clarified that the breach did not impact users’ wallet seed phrases, private keys, wallet passwords, payment card numbers, government-issued identification numbers, or bank account information. The company’s cold storage architecture remains segregated from e-commerce platforms, ensuring that digital assets and wallet credentials are securely stored and were unaffected by the incident.

In an official message, SafePal emphasized that hardware wallets, private keys, and crypto assets remain secure because the compromised e-commerce systems are completely isolated from wallet services. Nevertheless, the disclosed customer contact information could increase the risk of targeted phishing or social engineering attempts.

The incident exposed order information such as users’ names, contact details, shipping addresses, and order specifics. As a result, those affected could face more sophisticated phishing attempts in the aftermath of the breach.

Increased phishing risk prompts user alertWith personal order information accessed without authorization, SafePal expects attempted scams in the form of deceptive phone calls, emails, text messages, fake refund offers, fraudulent firmware updates, customer support impersonations, and malicious websites. The company underscored that it will never request sensitive wallet credentials such as a 12/24-word recovery phrase, private key, or PIN in any circumstances.

To counteract these risks, SafePal advises all customers to maintain heightened vigilance and avoid sharing confidential wallet information, even in the event of receiving official-looking requests or urgent messages. Users are urged to disregard any communications or links prompting them to reveal wallet keys or recovery phrases.

While the incident did not directly compromise wallet passwords or private keys, the company recommends that any user who has shared their recovery phrase, PIN, or key in response to suspicious communications should immediately transfer their assets to a new wallet for optimal safety.

In light of these developments, SafePal’s experience highlights a broader market trend, where even in the most secure environments, customers remain a target for social engineering. As attention turns to more robust, decentralized, and user-controlled solutions, Wall Street has begun moving towards Web3 frameworks. Investors now utilize platforms like 1stepSwap to store shares of leading U.S. companies and precious metals directly in their crypto wallets. Through the tokenization of real-world assets and automated price-finding systems, these platforms eliminate the need for intermediaries, offering users enhanced control and transparency.

SafePal reiterates that users should not disclose recovery phrases, PINs, or private keys to anyone, and recommends that those who believe they may have shared sensitive information after a suspected phishing attempt create a new wallet and transfer their remaining assets as soon as possible.

Disclaimer: The information contained in this article does not constitute investment advice. Investors should be aware that cryptocurrencies carry high volatility and therefore risk, and should conduct their own research.

Liquid GRAM Staking Is Now Live on SafePal SafePal has integrated Tonstakers, the largest liquid staking protocol on The Open Network, bringing GRAM liquid staking to the SafePal Earn section. You can now stake GRAM and earn up to 15% APY directly inside the SafePal mobile app and the SafePal S1 and X1 hardware wallet line.

The word that matters is liquid. Your GRAM secures the network and earns rewards, while your position stays represented by a token you continue to hold in your wallet. There is no lock-up period, and withdrawals can complete in minutes.

To get started, download or update the SafePal mobile app to V4.11.7 and open the Earn section.

Estimated APYUp to 15% APY, floating and auto-compounding every 18 hours and reflected in the value of tsTONCompoundingAutomatic on every 18 hour timeframe Minimum stake1 GRAMLock-up periodNoneWithdrawalMinutes via instant withdrawal (dependent on available liquidity)Available onSafePal mobile app (iOS & Android), SafePal S1, SafePal X1CustodyNon-custodial. Your keys never leave your device What Is GRAM? GRAM is the native cryptocurrency of The Open Network (TON), a layer-1 proof-of-stake blockchain built for speed, low fees, and mainstream reach through its integration with Telegram. GRAM pays for transactions, secures the network through staking, and carries governance rights.

Holding Toncoin? You already hold GRAM. On 15 June 2026 a community vote passed with 81.22% support to rename Toncoin to Gram and change the ticker from TON to GRAM. Only the name, ticker and logo changed. Your balance, wallet address and any existing staking position carried over untouched, and the blockchain is still called The Open Network.

Because TON is proof-of-stake, the network depends on validators locking up GRAM as collateral to process transactions. Those validators share their rewards with the holders who back them, which is what makes staking possible and what this integration gives you access to.

What Is Liquid Staking, and What Is tsTON? With native staking, your tokens are committed directly to the network for the duration of the staking term. That is a straightforward arrangement, and for holders with a long time horizon it works well. The trade-off is that the position stays committed until the network's unbonding period completes.

Liquid staking takes a different approach. When you stake GRAM through Tonstakers, the protocol issues you tsTON, a liquid staking token representing your share of the staking pool. Your GRAM goes to work securing The Open Network, and tsTON sits in your wallet as a claim on that position plus everything it earns.

What tsTON isA token representing your staked GRAM positionHow rewards accrueAutomatically, reflected in the value of your tsTONIs it transferable?Yes. tsTON is a standard token and remains yoursRedeeming ittsTON is redeemed for your original GRAM plus accrued rewardsDo you need to claim?No. Compounding is automatic every 18 hours. In simple terms, tsTON is a receipt that grows. You hand over GRAM, you receive tsTON, and the amount of GRAM that tsTON can be redeemed for increases as staking rewards accumulate. When you exit, you redeem your tsTON for GRAM, receiving back your original stake plus the rewards it has accrued.

GRAM Staking APY and Automatic Compounding SafePal GRAM staking currently offers an estimated 15% APY. This is a floating rate. GRAM staking yields move with the proportion of GRAM staked network-wide, validator performance, and transaction volume on The Open Network. It is not fixed or guaranteed.

How Compounding Works With the SafePal x Tonstakers integration in SafePal Earn, GRAM liquid staking compounds staking rewards continuously, every 18 hours. They accrue into your position as they are earned, so your balance is always working on itself.

You do not need to do anything for this. There is no claim button, no manual re-staking, no scheduled maintenance of your position. The APY figure quoted already reflects compounding, which is what distinguishes APY from a simple annual rate.

Estimated APY~15% APYRate typeFloating, varies with network conditionsCompoundingAutomatic and continuous every 18 hoursReward accrualContinuous every 18 hoursManual claimingNot requiredMinimum stake1 GRAMMaximum stakeNo cap Where GRAM Staking Rewards Come From GRAM staking rewards are generated by The Open Network itself, from two sources.

Network Emissions The Open Network issues new GRAM as a block reward to validators who process transactions during each validation cycle. Validators pass a share to the holders staking with them. This is the larger and steadier of the two components, and how proof-of-stake networks compensate validators for securing the chain

Transaction Fees Every transaction on TON pays a fee in GRAM, and a portion flows to validators and their stakers. This component scales with network usage, so the busier the network, the more fee revenue there is to share. The Catchain 2.0 upgrade in April 2026 cut fees roughly sixfold while raising throughput about tenfold, a deliberate trade favouring total activity over per-transaction revenue.

How to Stake GRAM on the SafePal Mobile App Staking takes under two minutes on iOS or Android.

Update the SafePal app. Update the SafePal App to V4.11.7 and above and access GRAM staking in the Earn section. Open the Earn section. Go to the wallet tab at the bottom, then the Earn tab at the top, and select GRAM staking. Enter your amount. There is a minimum stake of 1 GRAM, and you can stake any amount higher than that. Keep a small GRAM balance spare in your wallet to cover network fees. Confirm the transaction. It is signed locally on your device. A small TON network fee applies, paid in GRAM. Watch it compound. Rewards accrue automatically every 18 hours. No claiming required. Users can also refer to the written tutorial here for a step by step guide. How to Stake GRAM with the SafePal S1 and X1 Hardware Wallet GRAM staking is fully supported on the SafePal S1 and X1, making SafePal one of the few ways to run a liquid staking position from cold storage without a centralised platform or browser extension. The hardware wallet works alongside the mobile app: transactions are built in the app, then signed on the device itself.

Connect your hardware wallet. Ensure your S1 or X1 is paired and detected, and that both app and device firmware are current. Open the Earn section and select GRAM staking. Choose the GRAM staking product from your hardware wallet account. Enter your amount. There is a minimum stake of 1 GRAM, and you can stake any amount higher than that. Keep a small GRAM balance spare in your wallet to cover network fees. Review in the app, confirm on the device. The app displays the transaction for review. Your S1 or X1 prompts for physical confirmation, so press confirm on the device to sign. The transaction broadcasts. Your device signs inside its secure element and broadcasts to The Open Network. Rewards begin accruing and compound automatically every 18 hours. Hardware wallet security: Every staking and withdrawal transaction requires physical approval on the S1 or X1. Private keys remain offline in the secure element chipset and never touch your phone or the internet. No action can execute remotely, even if your connected phone is fully compromised. For anyone staking a meaningful GRAM position, this is the recommended setup.

Users can also refer to the written tutorial here for a step by step guide.

Non-Custodial GRAM Staking: SafePal vs Exchange Staking Most GRAM staking happens on centralised exchanges, which means the exchange holds the keys. Your stake is then only as secure as the platform holding it, and platform failure, frozen withdrawals, or insolvency put staked assets at risk in ways the blockchain itself does not.

SafePal GRAM staking is non-custodial throughout. Keys are generated and stored on your own device, transactions are signed locally, and neither SafePal nor Tonstakers takes possession of your assets at any point.

SafePal x TonstakersExchange GRAM stakingYou control private keysYesNo, held by exchangeNon-custodialYesNoHardware wallet supportYes, S1 & X1 with physical confirmationNoPosition stays liquidYes, via tsTONTypically lockedAssets at risk if platform failsNoYesWithdrawal controlOn-chain, minutes to ~18hSubject to exchange policyWhere it sitsSafePal Earn, alongside TRX stakingExchange earn product Start Staking GRAM on SafePal Today GRAM liquid staking is live in the SafePal Earn section, on the SafePal mobile app and the SafePal S1 and X1 hardware wallet. Stake any amount, earn up to 15% APY with compounding every 18 hours, keep your position liquid through tsTON, and withdraw in minutes, all without giving up custody of your assets.

Download the SafePal App →

Explore the SafePal S1 and X1 Hardware Wallet →

SafePal continues to expand the Earn section with vetted staking partners across more chains and assets, so you can put your portfolio to work without leaving SafePal or compromising on self-custody.

FAQs Q1. What is liquid staking?
Liquid staking lets you earn staking rewards without locking your capital away. When you stake GRAM through Tonstakers you receive tsTON, a token representing your staked position. Your GRAM secures the network and earns rewards, while tsTON stays in your wallet and remains transferable and redeemable.

Q2. What is tsTON?
tsTON is the liquid staking token issued by Tonstakers. It represents your share of the staking pool and accrues rewards automatically, so the amount of GRAM it can be redeemed for grows over time. When you withdraw, tsTON is redeemed for your original GRAM plus accumulated rewards.

Q3. How do I stake GRAM on SafePal?
Open the SafePal mobile app, go to the wallet tab at the bottom, then the Earn tab at the top, and select GRAM staking. Enter your amount and confirm. Rewards begin accruing immediately and compound automatically every 18 hours.

Q4. What is the GRAM staking APY on SafePal?
SafePal GRAM staking currently offers approximately 15% APY. This is a floating rate that varies with the network-wide staking ratio, validator performance, and transaction volume on The Open Network. It is not fixed or guaranteed. The figure reflects automatic compounding.

Q5. How often do GRAM staking rewards compound?
Approximately every 18 hours, or around 487 times per year, matching the rhythm of The Open Network's validation cycles. Compounding is automatic every 18 hours, so there is no claim button and no manual re-staking.

Q6. How long does it take to unstake GRAM?
Instant withdrawal returns your GRAM within minutes, drawing on available pool liquidity. 

Q7. Can I add to my stake after the initial deposit?
Yes. Top up at any time by repeating the staking flow. Additional GRAM begins earning from the moment it is deposited and joins the same compounding schedule as your existing balance. There is no maximum position size.

Q8. Can I withdraw part of my position?
Yes. You are not required to exit your entire position at once. Withdraw the amount you need and the remainder stays staked and earning.

Q9. Where do GRAM staking rewards come from?
Two sources. Network emissions, where The Open Network issues new GRAM as block rewards to validators who share them with stakers, and transaction fees, where a portion of the fees paid on every TON transaction flows to validators and their stakers.

Q10. Can I stake GRAM with the SafePal S1 or X1 hardware wallet?
Yes. GRAM staking is fully supported on the SafePal S1 and X1. Transactions are initiated in the SafePal mobile app and confirmed physically on the device. Private keys never leave the hardware wallet's secure element, making this the recommended setup for larger positions.

Q11. Is SafePal GRAM staking safe?
SafePal GRAM staking is fully non-custodial. Your private keys never leave your device, and neither SafePal nor Tonstakers takes possession of your assets. On the mobile app transactions are signed locally, and on the S1 and X1 every transaction requires physical confirmation on the device. 

Tonstakers is CertiK-audited and operates an active bug bounty. That said, staking on any proof-of-stake network carries protocol-level risks including validator slashing, and APY is variable.

Q12. What is the minimum amount of GRAM I can stake?
The minimum is 1 GRAM. There is no maximum. Keep roughly 1 GRAM spare in your wallet to cover network transaction fees.

Q13. Is GRAM the same as Toncoin?
Yes. GRAM is the token formerly known as Toncoin. On 15 June 2026 a community vote passed with 81.22% support to rename the token and change the ticker from TON to GRAM. Only the name, ticker and logo changed. Balances, wallet addresses and existing staking positions were unaffected, and the blockchain is still called The Open Network.

Q14. Can I stake other assets on SafePal?
Yes. GRAM liquid staking joins TRX staking in the SafePal Earn section. SafePal continues to add staking support for more chains and assets across both mobile and hardware wallets.

About SafePal: Founded in 2018, SafePal is a next generation non-custodial crypto wallet suite backed by Animoca Brands, Binance and Superscrypt. The suite empowers access to decentralized and centralized finance on 200+ blockchains across its hardware, software, and browser extension wallet solutions.

Encompassing a diverse mix of crypto asset management solutions like cross-chain swapping, trading and yielding tools, centralized exchange (CEX) mini programs, a fiat gateway and Mastercard for users — SafePal serves 30 million users globally across 200+ regions and countries in 16 languages.

SFP is a decentralized BEP-20 and ERC-20 token fuelling the SafePal ecosystem with various utilities such as discounts on SafePal products, staking boost and airdrop rewards, seamless conversion to gas tokens, and more.

Stay informed about SafePal →

About Tonstakers: Tonstakers is the largest liquid staking protocol on The Open Network, with over 120M GRAM in total value locked (~80% share of TON's LST market) and over 140,000 stakers.

It is non-custodial and independently audited. Users stake GRAM and receive tsTON in return, a liquid token that grows in value as rewards accrue every 18 hours, with no lock-up required.

Full Disclaimer The APY figure quoted is a floating estimate based on current conditions on The Open Network, including the network-wide staking ratio, validator performance, and transaction volume. It is subject to change without notice and is not a fixed or guaranteed return. 

GRAM liquid staking is provided through a third-party integration with Tonstakers. Instant withdrawal is subject to available liquidity in the staking pool, and standard withdrawal is bound by The Open Network's validation cycles. 

Proof-of-stake networks carry protocol-level risks including validator slashing. Use of tsTON in external DeFi protocols carries additional risks independent of staking and is not required to earn staking rewards. This article is for informational purposes only and does not constitute financial or investment advice. Always conduct your own research before making any financial decisions.

Regional restrictions: This feature is not available to persons located in, ordinarily resident in, or accessing it from the United States or the United Kingdom, or from any comprehensively sanctioned jurisdiction, currently including Cuba, Iran, North Korea, and the Crimea, Donetsk, Luhansk, Kherson, and Zaporizhzhia regions of Ukraine. Access may be geo-blocked.  

Not Investment Advice The information above does not constitute investment advice, financial advice, trading advice, or any other sort of advice and you should not treat any of the article's content as such. SafePal does not recommend that any cryptocurrency should be bought, sold, or held by you.

Cryptocurrency investment is subject to high market risks. Please invest cautiously. SafePal will not be responsible for any investment losses. SafePal will not be liable whatsoever for any direct or consequential loss arising from the participation of its activities. Do conduct your own due diligence and consult your financial advisor before making any investment decisions.

Non-Endorsement The appearance of a third party on SafePal and its activities does not constitute an endorsement, guarantee, warranty, or recommendation by SafePal. Do conduct your own due diligence before deciding to invest in any third-party projects or use any third-party services.

Dear SafePal Community,

Kusama Asset Hub migration is now supported within the SafePal wallet suite.With the latest SafePal wallet app V4.10.3 update, users can now store, send, and receive Kusama assets on the SafePal mobile app and hardware wallet, with browser extension support to follow in a few days.

Note: Users only need to update to the latest SafePal app version (V4.10.3 and above)  and the upcoming version update for the browser extension, followed by the addition of the new chain as described in the tutorial here to view and manage their Kusama assets. 

More information about the migration itself can be found here.

About Kusama:

Kusama is a public, pre-production environment and a "canary network" for its sister network, Polkadot. Built by the same team, it allows developers to test new features, applications, and updates in a real-world environment with lower risks before deploying them on Polkadot. 

Kusama has a more experimental and flexible environment with less stringent governance than Polkadot. The native token, KSM, is used for governance, staking, and transaction fees.  

About SafePal:

Founded in 2018, SafePal is a next generation non-custodial crypto wallet suite backed by Animoca Brands, Binance and Superscrypt. The suite empowers access to decentralized and centralized finance on 200+ blockchains across its hardware, software, and browser extension wallet solutions.

Encompassing a diverse mix of crypto asset management solutions like cross-chain swapping, trading and yielding tools, centralized exchange (CEX) mini programs, a banking gateway and Mastercard for users — SafePal serves over 25 million users globally across 200+ regions and countries in 16 languages.

SFP is a decentralized BEP-20 and ERC-20 token fuelling the SafePal ecosystem with various utilities such as discounts on SafePal products, staking boost and airdrop rewards, seamless conversion to gas tokens, and more.

Stay informed about SafePal here

$U Stablecoin Launches on BNB Сhain and Ethereum by United Stables

Dear SafePal Community,

We are excited to announce the integration of Hedera-EVM, a fully open source, proof-of-stake, public network and governing body for building and deploying decentralized applications. Native assets on Hedera-EVM will be supported on the SafePal software and hardware wallet, further enhancing cross-chain interoperability.

With the latest SafePal wallet app update, users can now store, send, and receive $HBAR along with other native assets through the SafePal mobile app here and hardware wallet line here respectively.

With this integration, SafePal users will also be able to explore dapps in the Hedera EVM ecosystem.

About Hedera: Hedera is a fully open source public distributed ledger that utilizes the fast, fair, and secure hashgraph consensus. Its network services include Solidity-based smart contracts, as well as native tokenization and consensus services used to build decentralized applications.

Hedera’s EVM-compatible environment enables developers to deploy Solidity smart contracts while benefiting from Hedera’s advanced distributed ledger technology (DLT). Built on hashgraph consensus, Hedera offers unparalleled throughput, deterministic finality, and predictable transaction fees.

About SafePal: Founded in 2018, SafePal is a next generation non-custodial crypto wallet suite backed by Animoca Brands, Binance and Superscrypt. The suite empowers access to decentralized and centralized finance on 200+ blockchains across its hardware, software, and browser extension wallet solutions.

Encompassing a diverse mix of crypto asset management solutions like cross-chain swapping, trading and yielding tools, centralized exchange (CEX) mini programs, a banking gateway and Mastercard for users — SafePal serves over 25 million users globally across 200+ regions and countries in 16 languages.

SFP is a decentralized BEP-20 and ERC-20 token fuelling the SafePal ecosystem with various utilities such as discounts on SafePal products, staking boost and airdrop rewards, seamless conversion to gas tokens, and more.

Stay informed about SafePal here

Sead Fadilpašić

Journalist

Sead Fadilpašić

Part of the Team Since

Jan 2018

About Author

Sead specializes in writing factual and informative articles to help the public navigate the ever-changing world of crypto. He has extensive experience in the blockchain industry, where he has served...

Has Also Written

Last updated: 

January 8, 2026

Non-custodial crypto wallet SafePal has joined hands with decentralised lending network Morpho to improve access to risk-adjusted stablecoin yield and enhanced security for self-custody users.

The novel initiative comprises two parts. The first is the native integration of Morpho Vaults with the latest SafePal V4.10.6 app update.

This move, the press release says, will enable seamless access to yield on certain stablecoins through the SafePal Earn yield aggregator. Specifically, this is USDC and USDT stablecoins from Morpho on Ethereum, Base, and Arbitrum networks.

🔔 BIG NEWS: @Morpho vaults are now natively integrated in the SafePal app
Earn with USDC & USDT on Ethereum; USDC on @arbitrum & Base seamlessly

🎁 500 limited edition hardware wallets + $5,000 in $MORPHO rewards

RT + follow to get extra bonus

Full details 👇 pic.twitter.com/UsHQNGMEmb

— SafePal – Crypto Wallet (@SafePal) January 8, 2026 Moreover, decentralised finance (DeFi) firms Steakhouse and Gauntlet curate these integrated Morpho Vaults. Therefore, “depositors to earn risk-adjusted yield from borrowers with blue-chip and highly liquid assets as collateral,” the announcement claims.

According to Paul Frambot, CEO and co-founder of Morpho, “stablecoins don’t need to sit idle, even in self-custody. Integrating Morpho Vaults into SafePal brings open, on-chain lending infrastructure directly to SafePal users, enabling them to earn yield while remaining fully non-custodial, on-chain, and transparent.”

The Walletdrop CampaignThe second part of the initiative is the launch of a Walletdrop campaign. Users who make deposits in the Morpho USDT and USDC vaults offered within SafePal Earn will have a chance to get one of the 500 co-branded hardware wallets, the team says.

The goal of this offer is to strengthen user security and encourage long-term self-custody, the partners note.

Morpho x SafePal Limited Edition Walletdrop The exclusive collection is based on the SafePal X1, the wallet suite’s latest open-source and Bluetooth model.

Planned “activation perks” include boosted yield opportunities on Morpho Vaults within SafePal, the announcement says.

Speaking of which, the SafePal wallet suite recently completed the full transition for its hardware wallet line from EAL5+ to EAL6+ security chipsets. The team also upgraded the SafePal Earn aggregator. The aim was to enhance both security and access to reliable yield options and providers.

‘Significant Risks from Opaque Structures’Boosting security is a must, the press release indicates.

“Unfortunate incidents like the recent $36M Upbit hack highlight that cold storage usage remains far below where it should be,” said Veronica Wong, CEO and Co-founder of SafePal. “The Morpho Walletdrop aims to grow hardware wallet usage while maximising security, which should be extremely synergistic, especially for long-term and passive strategies like stablecoin staking.”

Moreover, the team highlighted significant market volatility and the rising user concerns stemming from the $93 million collapse of Stream Finance, as well as the depeg of its XUSD stablecoin.

“The XUSD depeg and aftermath highlighted how opaque, off-chain yield structures can introduce significant counterparty and systemic risk,” Wong argued.

Meanwhile, SafePal is a non-custodial crypto wallet suite with 25 million users across 200 blockchains and across its hardware, software, and browser extension wallet solutions, its team says. Founded in 2018, SafePal is backed by Animoca Brands, Binance, and Superscrypt.

Moreover, Morpho is a universal lending network with $10 billion in deposits, it says. It allows businesses to connect to its open infrastructure to power any lending or borrowing use case at scale.

Table of contents

Today, SafePal, a multi-chain, non-custodial crypto wallet that supports multiple crypto assets across different blockchains, identified top crypto tokens with excellent trading performance on its trading platform over the past week. SafePal, powered by its native SFP token, functions as a non-custodial wallet ecosystem that allows people to securely store, trade, manage, and grow crypto assets, with the capability to move tokens across various blockchains.

SafePal’s move to list top-performing cryptocurrencies on its well-recognized wallet shows which tokens are gaining traction among users and are worth investing in for those who are looking for trending crypto assets. The analysis is based on how the winners performed in the past and pointed out factors such as real use cases, rising user interest, and others.

Top Crypto Gainers According to SafePal KAITO (KAITO) The analyst identified Kaito (KAITO) as the crypto asset that recorded the highest trading volumes and capital inflows over the past week on its wallet, an indicator of heightened investor interest in the cryptocurrency. However, the surge in trading volume and money influxes into the wallet has not so far been reflected in the asset’s price movement. KAITO’s price, which currently hovers at $0.5346, has been down 2.1% and 5.0% in the last 24 hours and past week, respectively.

Lighter (LIT) Moving down, Lighter (LIT) is singled out as the digital asset that experienced the second-highest trading volume on SafePal’s trading platform. This means that crypto users are significantly engaging with the token in the wallet. Of late, Lighter (LIT) coin has been witnessing increasing popularity among investors due to positive sentiment that crypto has a strong capability to give out the best returns. LIT’s price, which currently trades at $1.91, has been down 31.1% due to increased selling pressure. It is a relatively new token, which started trading last month; its traction is based on robust optimism in its future growth.

Pudgy Penguins (PENGU) Pudgy Penguins (PENGU)’s remarkable trading volume noticed on the SafePal wallet over the past week makes it third on this list. PENGU has been registering a significant surge in trading activity in the wallet, an indicator of sign of life in the cryptocurrency. PENGU’s price has been up 1.4% and 30.9% over the past week and month, respectively, a reflection that the token is drawing the attention of both retail and institutional investors.

Ondo (ONDO) Ondo (ONDO)’s trading activity on SafePal has been substantially high in the wallet over the week, indicating investors are massively accumulating the token in the trading platform. Driven by its strong role in the tokenized assets and DeFi sector, ONDO is attracting institutional and retail interest, assisting it stand out in the competitive crypto market.

Zebec Network (ZBCN) Fifth on the list is Zebec Network (ZBCN), which is also displaying notable bullish momentum, outperforming its weekly averages on the SafePal trading platform. Zebec Network, a major player in the RWA and streaming payment sectors, started experiencing heightened trading volume at the beginning of the year. ZBCN’s price, which currently stands at $0.003225, has been up 7.8%, 33.9%, and 265.3% over the past week, month, and year, respectively, showing its market popularity.

Hyperliquid (HYPE) Last on the list is Hyperliquid (HYPE), another cryptocurrency that attracted outstanding user interest in the SafePal wallet in the last seven days. The significant uptick in HYPE’s trading volume in the wallet appears to be catalyzed by notable investor activity on the trading platform. HYPE’s price has been up 3.7% and 4.5% over the past week and month, respectively, supported by rising interest from investors and speculative demand.

AUTHOR

Nicholas Otieno is a fintech writer specializing in cryptocurrency markets. Since 2019, he has written articles to educate readers about cryptocurrency and its substantial positive impact on global prosperity. Nicholas is a Bitcoin holder, believing firmly in its fundamentals. His work has been featured in publications such as Finance Magnates, Blockchain.News, Bitcoin Magazine, Coincub, and among others. When he's not writing, Nicholas enjoys performing domestic tasks, spending time with friends, listening to music, and watching football.

Dear SafePal Community,

Today, we’re excited to announce the launch of the SafePal Solana Builders Grant, a $3 million initiative designed to help Solana ecosystem projects and builders scale sustainably throughout 2026. 

Since 2021, SafePal has integrated the Solana network and supported the ecosystem by supporting and implementing important features for users. Recent and existing features include:

-A dedicated Solana DeFi hub in SafePal’s mobile and hardware wallets
-Native support to buy, swap, trade, and stake $SOL and SPL tokens
-Access to emerging verticals such as tokenized stocks and other trending on-chain assets

While user needs and security has always been a key priority for SafePal, long-term and meaningful Web3 growth also comes from empowering other builders with the right tools to better serve users. The success of pilot Walletdrop campaigns with DeFi protocols such as Jumper Exchange, 1inch, and Morpho have proven that growth strategies focused on ownership, security, and real users outperform hype-driven approaches, serving as a strong impetus for the creation of a larger scale initiative and launch of the grant.

The grant program will run across the full year of 2026 and consists of:

1. $2 million worth of SafePal hardware wallet sponsorships: a meaningful and effective growth mechanism: As the crypto industry matures, more innovative projects are emerging especially on high-activity ecosystems like Solana. However, teams still struggle with sustainable and relevant user growth.

Token airdrops are widely used, but they often create short-lived momentum, attract mercenary users and bots, and sometimes divert focus away from long-term product value and finding actual product market fit. 

Hardware Walletdrops offer a different path, offering stronger user retention, higher-quality engagement, and significantly less bot abuse.

2. $1 million in marketing and growth resources to help projects reach, onboard, and engage 30 million crypto native users While initiatives like InfoFi have emerged to offer channels for projects to build rich and engaging users, the accuracy, effectiveness and sustainability remain inconsistent. Projects and builders still need cost-efficient, high-impact growth tools that deliver meaningful and relevant results.

This section of the grant will offer resources to boost user retention and brand image, such as premium listings in the SafePal Dapp center and homepage, the opportunity to collaborate and create in-depth customized tasks to drive actual product usage and track conversions, filtering relevant users by whitelisting based on asset and behavior to combat bot farmers and more.

Solana ecosystem projects can apply for the grant via the official SafePal website here.

Applications will be evaluated based on criteria such as the length of time the project has been live, monthly active users (MAU), total value locked (TVL), community size and engagement, ecosystem contributions (e.g. hackathons, workshops, developer events), and more.

Commemorating the grant launch: Limited-Edition Solana x SafePal Hardware Wallets To commemorate the launch of the grant, SafePal has produced 1,500 limited-edition Solana branded hardware wallets. These wallets will be distributed during Solana Accelerate APAC to event attendees, VIPs and core contributors, and also via selected bounty and community programs thereafter.

SafePal will also be exploring future potential additional utilities for these wallets, including staking benefits and airdrop boosts for this exclusive collection and for wallets distributed through the grant program.

Looking ahead, SafePal will continue supporting the Solana ecosystem together with other blockchain ecosystems and crypto protocols as part of our roadmap to evolve into a comprehensive DeFi and CeFi hub while staying true to our mission of secure, user-first self-custody.

About SafePal: Founded in 2018, SafePal is a next generation non-custodial crypto wallet suite backed by Animoca Brands, Binance and Superscrypt. The suite empowers access to decentralized and centralized finance on 200+ blockchains across its hardware, software, and browser extension wallet solutions.

Encompassing a diverse mix of crypto asset management solutions like cross-chain swapping, trading and yielding tools, centralized exchange (CEX) mini programs, a banking gateway and Mastercard for users — SafePal serves 30 million users globally across 200+ regions and countries in 16 languages.

SFP is a decentralized BEP-20 and ERC-20 token fuelling the SafePal ecosystem with various utilities such as discounts on SafePal products, staking boost and airdrop rewards, seamless conversion to gas tokens, and more.

Stay informed about SafePal here

KyberSwap March 11, 2026

Trade & Earn 4,000 SafePal X1 Hardware WalletsKyberSwap is launching a 6-week Trade & Earn campaign with 4,000 free SafePal X1 Hardware Wallets up for grabs — worth $280,000 in total (each wallet valued at $70).

Here’s everything you need to know.

1/ Campaign OverviewDuration: 6 weeks, starting from March 16 at 8:00 AM UTCTotal Rewards: 4,000 SafePal X1 Hardware Wallets (each wallet is valued at $70)Weekly Allocation: 667 walletsCost to participants: WALLET IS FREE — participants only cover shipping and any applicable customs taxesNote: Each address can participate across multiple weeks, but can only claim a maximum of one SafePal wallet. Points and registration reset every Monday at 8:00 AM UTC.

2/ Reward AllocationEach week, 667 SafePal X1 Hardware Wallets are reserved for the Top 667 participants on the weekly leaderboard.

a) Leaderboard (667 Wallets)Reserved for the Top 667 participants of that week.Eligible participants must complete their claim within the designated claim period.b) First-Come, First-Served (FCFS) Round (Unclaimed Wallets)Any wallets that remain unclaimed after the leaderboard claim window will move to an FCFS round.The FCFS round is open to eligible participants who were not in the Top 667 that week.Rewards will be distributed in the order of successful claims until the remaining allocation is fully claimed or expired.3/ How to ParticipateVisit kyberswap.comClick “Join Now” on the campaign pageTrade using eligible productsAccumulate points through qualifying trading activityRewards are subject to successful redemption via the claim portal.

4/ Point DistributionFor every $100 volume, participants earn points based on the following distribution:

To appear on the leaderboard, participants must have a trading volume greater than 0Data on the campaign site may take up to 10 minutes to update after a transaction is made.Trading volume is rounded down to the nearest $100. For example, if your trading volume is $199, it will be counted as $100.5/ Eligible ActivitiesPoints are earned through trading activity on kyberswap.com using: Swap, Zap, Cross-Chain Swap, Limit Order, Smart Exit OrdersThe campaign takes place on 6 chains: Ethereum, BNB Chain, Base, Arbitrum, Polygon, Avalanche6/ Important Rules Per ProductSwap

Eligible tokens: All whitelisted tokens on KyberSwapWhitelisted tokens are default tokens available on kyberswap.com and do not require manual “Import” to swap.Excluded activities: Wrap ↔ UnwrapZap

Zap In, Zap Out, Migrate, and Reposition volumes count toward pointsCross-Chain

Only the sender’s volume counts toward pointsLimit Order

Only filled order volume countsUnfilled or canceled orders do not earn points7/ Weekly BonusParticipants can earn up to 170 bonus points per week by using multiple KyberSwap products within the same week:

Use any 2 different products → +20 pointsUse any 3 different products → +50 pointsUse any 4 different products → +100 pointsBonus progress resets weekly.

8/ Claiming & ShippingWithin 48 hours after each week ends, KyberSwap will publish the claim portal links on KyberSwap’s X, Telegram, and Discord for both the top 667 and FCFS participants. Participants should turn on notifications for these channels to receive the latest updates.Claim portal links will be provided for both Leaderboard and FCFS participants.Eligible participants have approximately 7 days to claim.If the deadline is missed, eligibility will expire.The SafePal X1 Hardware Wallets are provided free of charge. Participants are responsible for:

Shipping fees (calculated at checkout)Customs duties and taxes (if applicable)Note:

The wallet is provided by SafePalShipping is limited to countries supported by SafePal: https://safepalsupport.zendesk.com/hc/en-us/articles/20151246730011-Countries-and-Regions-Available-for-ShippingProduct reference: SafePal X1 Hardware Wallet https://www.safepal.com/en/store/x1Ready to Start?4,000 SafePal X1 wallets.

6 weeks.

Every trade counts.

Join now: https://kyberswap.com/campaigns/safepal

. . .

Home > Kyber Content Hub > Trade & Earn 4,000 SafePal X1 Hardware Wallets

Latest articles

Kingstown, St. Vincent and Grenadines, March 17th, 2026, FinanceWire

Changelly, a leading instant crypto exchange, and SafePal, a next-generation non-custodial crypto wallet manufacturer, are joining forces to help users strengthen the security of their funds while keeping everyday crypto swaps fast and simple. Bringing together Changelly’s instant exchange infrastructure and SafePal’s cold storage expertise, the initiative introduces a limited-edition collection of SafePal S1 hardware wallets to the Changelly community.

According to a recent Changelly survey, over 52% of users prioritize strong asset protection and full control over their funds when choosing a crypto wallet. At the same time, convenience and ease of use remain key factors.

In response to these insights and as part of the collaboration, the companies are introducing a co-branded Limited Edition hardware wallet that integrates Changelly’s seamless swap experience with SafePal’s self-custody infrastructure.

250 Limited-run hardware wallets released exclusively for the Changelly App users

The co-branded Limited Edition SafePal S1 features a design created specifically for the Changelly partnership and is unavailable through standard retail channels. Starting from March 17, any user who swaps in the Changelly mobile app can participate in daily raffles, where 10 Limited Edition SafePal S1 wallets are awarded every 24 hours throughout the campaign period.

Compact and lightweight—roughly the size of a credit card—the SafePal x Changelly hardware wallet provides direct access to Changelly’s favorable rates for crypto-to-crypto swaps. The device stores private keys fully offline and uses QR-code-based transaction signing through an integrated camera to maintain safe transaction authorization. The wallet supports multiple blockchain networks, allowing users to manage 1,000+ cryptocurrencies through a connected mobile app.

Changelly App giveaway campaign

All registered and logged-in users are eligible for the giveaway—they just need to confirm their participation with a click on the in-app main page banner. Any crypto-to-crypto transaction with a value of $50 or higher made through the app enters the 24-hour raffle after confirmation of participation.

To participate in the campaign and get one of the Limited Edition hardware wallets, users need to download the Changelly mobile app via the App Store or Google Play, register or log in to their account, and confirm participation on the dedicated campaign screen. After that, completing a crypto-to-crypto swap of $50 or more automatically enters the user into the daily raffle. Participants can follow in-app updates and check their email to see whether they have been selected as a winner.

Users can increase their chances by completing additional qualifying swaps and entering the raffle on multiple days during the campaign period. Additional entries may also be earned by sharing campaign information on social media.

Full campaign terms & conditions are available here.

A partnership focused on strengthening self-custody

This collaboration comes amid a broader market shift toward self-custody following recent market cycles that reinforced the importance of asset control and counterparty risk awareness. Demand is increasingly focused on solutions that combine secure private key ownership with seamless access to liquidity—positioning infrastructure partnerships like Changelly and SafePal at the center of this trend.

With over 10 years of experience, Changelly is trusted by millions of crypto users across the globe. To its community, Changelly delivers instant crypto-to-crypto swaps and accessible fiat-to-crypto purchasing options. The company’s partners benefit from its APIs, which have been recognized within the industry for their performance and reliability. 

SafePal serves over 30 million users globally across 200+ regions and countries in 16 languages. It encompasses a diverse mix of crypto asset management solutions like cross-chain swapping, trading and yielding tools, centralized exchange (CEX) mini-programs, a banking gateway, and Mastercard for users.

About Changelly

Changelly is an instant crypto exchange trusted by over 10 million users worldwide. Founded in 2015, the platform offers secure, intuitive crypto-to-crypto swaps for over 1,000 cryptocurrencies and 24/7 live customer support. Changelly also features a built-in smart fiat on-ramp aggregator, giving users access to up to 220 competitive offers from verified providers, enabling seamless purchases of 350+ cryptocurrencies using 20+ global payment methods.

Changelly is available on desktop (website), iOS (App Store), and Android (Google Play).

About SafePal

Founded in 2018, SafePal is a next-generation non-custodial crypto wallet suite backed by Animoca Brands, Binance, and Superscrypt. The suite empowers access to decentralized and centralized finance on 200+ blockchains across its hardware, software, and browser extension wallet solutions.

Dear SafePal Community,

We are excited to announce the integration of MST blockchain, a Layer-1 infrastructure network focused on scalable architecture, real-world asset integration, quantum-ready security, and ecosystem-driven adoption. Native assets like $MSTC will be supported on the SafePal software and hardware wallet, further enhancing cross-chain interoperability.

With the latest SafePal wallet app update, users can now store, send, and receive native assets for MST blockchain through the SafePal mobile app here and hardware wallet line here respectively.

About MST Blockchain: MST Blockchain is a Layer-1 infrastructure network focused on scalable architecture, real-world asset integration, quantum-ready security, and ecosystem-driven adoption. The network continues expanding its validator ecosystem, developer community, and institutional partnerships globally.

About SafePal: Founded in 2018, SafePal is a next generation non-custodial crypto wallet suite backed by Animoca Brands, Binance and Superscrypt. The suite empowers access to decentralized and centralized finance on 200+ blockchains across its hardware, software, and browser extension wallet solutions.

Encompassing a diverse mix of crypto asset management solutions like cross-chain swapping, trading and yielding tools, centralized exchange (CEX) mini programs, a banking gateway and Mastercard for users — SafePal serves 30 million users globally across 200+ regions and countries in 16 languages.SFP is a decentralized BEP-20 and ERC-20 token fuelling the SafePal ecosystem with various utilities such as discounts on SafePal products, staking boost and airdrop rewards, seamless conversion to gas tokens, and more.

Stay informed about SafePal here