Crypto wallet incidents: SafePal and Bits of Gold face data exposure while alleged AI theft hits Coldcard

SafePal said an authorization vulnerability in an order-tracking plugin exposed personal information for 39,798 customers, including names, contact details, delivery addresses, and transaction information. The company also stated that wallet security was not affected, with no compromise of private keys or seed phrases, and it removed more than 30 fraudulent websites linked to the incident ^{[1] [2] [3]}.

Separate reporting describes an alleged AI-assisted campaign targeting Coldcard hardware wallets, claiming the theft of more than 1,778 bitcoin and verified losses of over $112.7 million across 8,600+ wallet addresses. The coverage attributes the suspected exploitation to a firmware vulnerability active since March 2021, citing research and commentary about how the flaw may have been identified and used ^{[4] [5]}.

Another incident discussed involves Bits of Gold, where a breach could potentially expose data for up to 200,000 customers. The reports say customer funds and crypto assets remained safe online, with no exposure of passwords or private keys, while warning that phishing and impersonation remain key risks after any potential data leak ^[6].

Across the incidents, reported impacts were centered on exposed user or wallet-related information, while at least two accounts cited no theft of private keys or funds ^{[1] [6] [2]}.