Singapore39,798 hardware-wallet buyers’ addresses leaked.
No funds were taken, but the list maps crypto holders to their front doors.
An “authorization flaw” in SafePal’s order-tracking plug-in let one customer view another’s shipping details.
No legitimate vendor asks for a seed phrase, whatever a follow-up call claims.
Sources: CoinDesk