Every recorded SafePal security incident, newest first, with severity, fix status and sources.
Names, contact details and shipping addresses of about 39,798 SafePal customers were exposed, and some were then targeted with phishing. SafePal states wallets and funds were not compromised by the breach itself.
Someone with physical access could open an S1 without triggering its tamper response and roll back its firmware, but Kraken did not reach keys or funds. SafePal states the findings are not exploitable and patched the downgrade in firmware 1.0.24.
More entries do not mean a less secure brand: widely sold devices draw more published research and more targeted attacks, and some vendors disclose more than others.
WalletInsights. Hardware wallet security incident tracker. Last checked November 3, 2026. https://walletinsights.io/en/security-incidents/safepal/
Vendors, researchers and readers can send corrections or statements to security@walletinsights.io. We check them against the sources, update the entry and record the change in its log.