According to CoinMeta, on August 16th, it was disclosed that due to a authorization flaw in the order tracking plugin, the order information of nearly 39,798 users was exposed. The affected records covered orders between March 2, 2025, and April 11, 2026, including names, email addresses, mailing addresses, phone numbers, and purchase details. SafePal stated that emails have been sent to the affected customers, and a tool has been introduced to allow buyers to check their orders using the order number and mailing country. The wallet provider confirmed that mnemonics, private keys, wallet passwords, payment card numbers, bank account information, and government-issued identification numbers were not exposed. SafePal also mentioned that no impact on wallet access or customer funds was found as a result of this incident. The company has fixed the vulnerability and implemented additional access controls. SafePal emphasized that users do not need to transfer their assets due to the exposure of order information; however, if they have entered their mnemonics or private keys on suspicious websites, they should consider their wallet to be compromised and create a new wallet to transfer the remaining assets.