SafePal Order Tracking Plugin Leaks Data of Nearly 40K Users

The incident matters less for its scale than for where it sits: an order tracking plugin, not the wallet's core custody function, which is a reminder that peripheral tooling and third-party integrations often carry the weakest controls in crypto products. It affects users who handed over personal data through that channel, and by extension the wallet provider's operational credibility. Whether such plugin-level exposures keep surfacing across the ecosystem, and how providers handle disclosure and remediation, is the open question worth watching.