SafePal has issued a follow-up update on its security incident, saying it is continuing to track phishing websites and impersonation accounts and plans to bring in a professional anti-phishing security company to speed up the removal of malicious content and help protect user assets.
The crypto wallet project said it is now making a final selection from four professional anti-phishing security firms. Once a partner is chosen, SafePal said it expects to improve the efficiency of its response to threats including spoofed websites and scam accounts.
Monitoring whether affected data is being sold or exposed
SafePal said the team is also continuing to monitor whether affected data is being sold or made public, including across dark web forums and trading marketplaces. If it detects signs of related data leakage, impacted users will receive risk alerts immediately.
Order system set for a full security review
On the audit front, SafePal said it is making a final choice from three established independent security organizations. The selected firm will conduct a full security review of the order system.
The team added that it is reassessing order and logistics processes to reduce the amount of data that needs to be stored at the initial stage of the system, in an effort to lower potential risk from the source.
One-on-one support to continue for affected users
For affected users, SafePal said it will continue to provide one-on-one assistance through official support channels. It also said it will keep updating its scam protection page with incident updates, frequently asked questions and scam case analysis.
SafePal repeated its warning to users that the official team will never ask for a seed phrase. Users were told not to share their seed phrase with anyone, not to scan unknown QR codes or click suspicious links, and to verify information sources through official channels.