UPDATED 8:27 PM ET A GoCheckMy site
GoCheckMyCrypto Crypto, checked.
The Edition

Evening Edition, Tuesday, August 18, 2026

The Desk

SafePal discloses breach exposing 40,000 customers' personal data

The hardware wallet provider SafePal disclosed that an authorization flaw in its order-tracking plug-in exposed names, addresses, and contact details of 39,798 customers who placed orders between March 2025 and April 2026. No private keys, seed phrases, or cryptocurrency assets were compromised, but affected users now face heightened phishing risk.

The hardware wallet provider SafePal disclosed on Sunday that an authorization flaw in a plug-in used to track customer orders exposed the names, physical addresses, and contact details of 39,798 customers, according to CoinDesk reporting. The exposure affected customers who placed orders between March 2, 2025, and April 11, 2026.

The breach reveals a distinction that has become routine in crypto security disclosures: the wallet's cryptographic core remained intact. SafePal confirmed that no cryptocurrency funds, seed phrases, private keys, bank details, or government identification documents were compromised. The flaw was not in the wallet's key storage or signing mechanism, but in a supplementary order-processing system, an authorization vulnerability that allowed attackers to access other customers' order information via API manipulation.

SafePal notified affected customers by email from the address security@safepal.com and deployed a fix to the vulnerable plug-in. The company subsequently hired an independent third-party security firm to audit the patch and review its order-processing systems. Going forward, SafePal said it will retain customers' personal data in its order system for only 90 days from the date of collection, a policy shift driven by the incident.

Continued →

The Evening Brief 11:36 PM UTC

Bitmine, the crypto treasury company led by Tom Lee, bought 9,926 ethereum last week and now holds 5.815 million ETH, representing 4.8% of Ethereum's total supply and approximately $11 billion in value at the time of reporting, according to CoinDesk. The company launched in June 2025 with a stated goal of acquiring 5% of Ethereum's supply and has maintained a steady weekly buying cadence over the past 14 months, bringing it within striking distance of that target.

On the protocol layer, Ethereum developers are reviewing 66 proposals for the 2027 Hegotá upgrade, per CoinDesk reporting. Frame Transactions (EIP-8141), a privacy-focused candidate that would let users customize how transactions are approved and paid for without intermediaries, has not yet cleared the approval bar; as of August 17, only one proposal, FOCIL, had been approved. The inclusion or exclusion of Frame Transactions will signal whether Ethereum's developers prioritize base-layer privacy infrastructure or see it as a problem for applications to solve.

Regulatory and security pressures continued to mount. The U.S. Treasury Department published proposed federal definitions and jurisdictional rules to implement the GENIUS Act stablecoin legislation, which takes effect January 18, 2027, according to CoinDesk. The proposal opens a 60-day public comment period with a deadline in mid-October but arrives months after the law's one-year rulemaking deadline passed last month. Under the GENIUS Act, entities cannot generally issue payment stablecoins in the U.S. without obtaining an appropriate federal or state license. Treasury Secretary Scott Bessent stated the administration is moving quickly to put rules in place "as we work to provide the regulatory certainty businesses need to innovate and grow in America, cement the role of the U.S. dollar as the world's reserve currency, and keep America the crypto capital of the world," per CoinDesk. Uncertainty remains on how the Treasury will treat foreign issuers like Tether and whether final rules will be in place before implementation.

Bits of Gold, Israel's largest crypto broker, reported on August 17 that a hacker compromised a third-party data analytics vendor connected to its platform, exposing personal and financial data for approximately 200,000 customers, according to CoinDesk. The exposed data includes names, national ID numbers, emails, phone numbers, IP addresses, and bank account details. The breach is the third major crypto-sector data compromise disclosed within a week, following similar third-party vendor incidents at SafePal and Trezor. Bits of Gold confirmed that no funds, private keys, passwords, or CVV codes were compromised. The incident invalidates the premise that SOC 2 Type 2 certification alone prevents large-scale data compromise and signals a structural gap in crypto platform security posture: third-party vendor access is now a primary attack vector.

The desk's leverage and ETF data show modest consolidation. Bitcoin traded at $64,684.49 on August 18, up 0.3% in the prior 24 hours but down 0.36% over the week; Ethereum traded at $1,917.62, up 0.28% on the day. Per the desk's leverage board, Bitcoin liquidations on OKX favored shorts over longs in the 23-hour window ($4.25 million in short liquidations versus $553,258 in longs), while Ethereum saw the inverse ($4.14 million in long liquidations versus $2.35 million in shorts). ETF flows remained positive: Bitcoin saw $38.7 million in inflows on August 18 and $87.8 million over the last five sessions, while Ethereum received $5.6 million on the day and $49.8 million over five sessions. The desk's Whale Watch board shows $29.0 million in bitcoin moving off exchanges over 48 hours, with the largest single outflow of $176.9 million in bitcoin from Bitstamp, suggesting accumulation or self-custody positioning despite modest near-term price gains.

Back issues: 2026-10-15 · 2026-10-14 · 2026-10-13 · 2026-10-11 · 2026-10-10 · 2026-10-09 · 2026-10-08 · 2026-10-06 · 2026-10-05 · 2026-10-04 · 2026-10-03 · 2026-10-02 · 2026-10-01 · 2026-09-23
GoCheckMyCrypto is a site of Go Check My Brands LLC · Every source linked · Never financial advice Standards & Corrections · Archive