SafePal order tracking plugin vulnerability leads to information leakage of nearly 40,000 users

SafePal stated that its order tracking plugin has a security vulnerability, leading to unauthorized access to some customer information.

This incident involves approximately 39,798 users, with affected customers being those who placed orders between March 2, 2025, and April 11, 2026.

The leaked information includes names, email addresses, shipping addresses, phone numbers, and purchase details, but does not involve mnemonic phrases, private keys, wallet passwords, bank card information, or government-issued identification numbers.

SafePal stated that the relevant vulnerability has been fixed, and affected users have been notified individually. At the same time, the official has launched a query page where users can confirm whether they are affected by entering their order number and shipping country.