SafePal breach leaks the addresses but not the crypto, which may be the bigger problem