Trading Education Platform SystemSubscribe for FreeSupport
Wallets / SafePal S1 Pro
HARDWARE WALLET REALITY CHECK · READ 11 OCT 2026

SafePal S1 Pro: what the sources say

Current 1 disclosed weakness 1 company incident

Key facts

The questions, with sources

QuestionWhat the sources saySource
Status
Current — Official store page lists S1 Pro for sale on 2026-10-11 (USD 89.99) next to S1 (USD 49.99) and X1 (USD 69.99); no successor or discontinuation notice found. Model name matches the current lineup.
Company
SafePal
List price
$89.99 — Official store list price in USD, VAT and duty excluded; no EUR price shown.
Secure element
Yes: chip not named; CC EAL6+ (maker claim)
Firmware code
Partial; reproducible build: not verified. Maker letter of 2023-09-13 says X1 code and mobile-app code (including QR-scanning code used by S1/S1 Pro) were open-sourced, and that S1 line firmware was not yet open source; S1 page says essential key-generation code is open. Whether S1 Pro firmware was published later was not verified.
Companion app
Partial. Per the 2023-09-13 letter, mobile wallet code for signing, smart-contract approval and key generation/storage is open source; browser extension was not at that date.
Connections
USB: charging only per maker (page says 'no USB connection' but lists a Type-C charging port). Bluetooth: no. NFC: no. QR: yes. microSD: n/v.
Screen
1.3 inch full-colour, 320x320
Assets
200+ blockchains, unlimited coins and tokens (maker)
Multisig and PSBT
Not verified. Not mentioned in maker pages read.
—
Passphrase
Yes. Passphrase listed in S1 Pro Settings menu and on the S1 comparison table.
Shamir backup (SLIP-39)
Not verified. Not mentioned in S1 Pro manual or product pages read.
—
Recovery phrase standard
BIP39 mnemonic (12/18/24-word sets per Coin Bureau quoting SafePal backup page; not read at source)
Optional recovery service
Not verified. No recovery service found in pages read.
—
FIDO / passkeys
Not verified. Not mentioned in pages read.
—
Bug bounty
Not verified
—
Warranty
One year from activation date for hardware wallets (maker store page).
—

"n/v" or "not verified" means we could not confirm it from a source we could read. Maker claims are marked as such. Confirm on the maker's site before you buy. Education only, not investment advice.

Summary

Five facts

  • Official store lists S1 Pro at USD 89.99 (VAT and duty excluded) on 2026-10-11 [source 1].
  • Maker states a CC EAL6+ secure element and QR-only air-gapped signing with no Bluetooth, WiFi or NFC [source 1].
  • Maker said in 2023 that S1-line firmware was not open source; wallet-app code was published on GitHub [source 3].
  • Kraken Security Labs reported weaknesses in the original S1 in 2021 without stealing funds; downgrade issue patched in V1.0.24 [source 4].
  • In 2026-08 SafePal disclosed a customer order-data exposure affecting about 39,798 people; it reports no wallet credentials were involved [source 5].
Independent checks

Audits

  • No independent audit found in our search.
Device record

Publicly disclosed weaknesses

  • 2021-02 Kraken Security Labs (disclosed to SafePal 2020-11-18, published 2021-02-16) found on the original S1 (hardware revision S1P_Ver03) a bypassable tamper alarm, a firmware downgrade possibility, and unverifiable secure boot; it did not steal funds. SafePal released V1.0.24 for the downgrade issue and said other items were within expectations. S1 Pro not tested in that report. Older than 5 years. Funds lost: no. Fix status not verified source

Disclosed weaknesses are listed whatever their severity. "Funds lost" is what the sources say. "Fixed" means the source states a fix exists, which only helps if you update.

Company record

Incidents at the maker or its service providers

  • 2026-08-16 SafePal disclosed an authorization flaw in an order-tracking plug-in that let people view other customers' order details: name, email, shipping address, phone and purchase details for about 39,798 customers who ordered between 2025-03-02 and 2026-04-11. Update posted 2026-08-18. Customer funds lost: no. Outcome: SafePal says seed phrases, private keys and wallet credentials were not in the data and it found no evidence of wallet or fund compromise; it fixed the flaw, engaged a third party, cut retention to 90 days and took down 30+ phishing sites. Press warns of phishing risk. source

These affect the company or its customers and apply to every device of the brand. They are not weaknesses of this device.

Questions

Questions about SafePal S1 Pro

Is SafePal S1 Pro safe?

We do not give a yes or no, because safety depends on what you need to protect and on facts that change. We found 1 publicly disclosed weakness and 1 company incident in our search. Read the sources above before you buy.

Does SafePal S1 Pro need an internet connection?

Signing happens on the device. How the device talks to your phone or computer depends on its connections: QR. The companion app or software that builds the transaction is online.

Who found the weaknesses listed for SafePal S1 Pro?

The page names who disclosed each one when the source does. Several were found by a competing maker's research team or by independent security firms. We cite the affected company's own statement where we found one, and label press-only reports.

Sources

Where this comes from

Not verified: Not verified: company legal name and country (only a third-party aggregator suggested Singapore; not used); SE chip model and certificate; S1 Pro firmware open-source status after 2023-09; any independent audit of S1 Pro (none found); whether the Kraken 2021 findings apply to S1 Pro; touchscreen; microSD; multisig; SLIP39; passkeys; seed word counts at maker source; bug bounty (searches returned nothing); EUR price. Tooling note: maker page text contradicts itself on USB ('no USB connection' vs Type-C charging port).

See how we check. To report an error, use corrections and right of reply.