Safepal hardware wallet review and opinions

[Lillominato89]

As mentioned a few posts before, I find the dex binance function in the wallet extraordinary. In this regard, have you ever tried this function? I find it interesting enough and if possible can you tell us your impression? Or if you have other news to say, because I'm thinking of buying one. Many thanks in advance

unfortunately at the moment I don't have BNB, but I am inclined to buy someone just to be able to try this function, I will keep you informed when I can try the dex, since there is still nothing new, or neglect in addition to the dex that there is the swap functionality that I have not described in the review, but not very useful in my opinion, since it exchanges coins at the last available price, useful only for those who do not want to wait and quickly exchange their coins

[TedMosby]

I got mine a few days ago.



The first impression, it feels fragile. But I like the button. It's more user-friendly compared to Ledger Nano X that I used before.
I installed SafePal App on iPad, It crashed once.
Also, the pointer when you input the pin, sometimes it's disappeared for a few seconds.
Please fix this, because I don't want my wallet in self-destruction mode when I miss clicking my pin because of this problem 

[Lillominato89]

I got mine a few days ago.



The first impression, it feels fragile. But I like the button. It's more user-friendly compared to Ledger Nano X that I used before.
I installed SafePal App on iPad, It crashed once.
Also, the pointer when you input the pin, sometimes it's disappeared for a few seconds.
Please fix this, because I don't want my wallet in self-destruction mode when I miss clicking my pin because of this problem 

I have never encountered this problem, maybe it would be better to hear the support, they are very friendly and available to solve problems, Maybe they can tell you something about it

[Lillominato89]

Two days ago updates were released for both the hardware wallet and the mobile app, mostly they fixed minor identity bugs and added the dapp section on the wallet app. I still haven't made the updates personally.

[Lillominato89]

So I just finished the update on both the hw and the app.
here the text of the updates

SafePal S1 v1.0.18-10010
     📆 Release date: 2020/8/22

     Added 'Authorization' in the 'Signing History' tab

     Supported authorization and signing of the Ethereum-based DApps (e.g. Uniswap)

     Supported authorization and signing of Binance Exchange in the DApps category

instead this is what I see directly inside the app, few things of course, but it is already a start .. I hope for continuous updates



They fixed a bug on the swap that did not trade the coins, now it works fine.
the update was all in all simple to perform, also because there is a guide on the official website that explains step by step what to do

https://www.safepal.io/upgrade to upgrade HW
https://www.safepal.io/download to update the apps

[Lillominato89]

The Safepal team implemented the fast defi token exchange and added the Compound section in the dapps, this in the latest update, great features in my point of view. How does this HW look to you?

[jm824]

I've read somewhere (can no longer find where, sorry) that the QR codes are encrypted. Can anybody confirm if that's the case? If that is true this seems to be a danger. How do we know that some information isn't leaked out to binance labs? There are other air-gaped HW wallets, Cobo vault, ellipal titan. All are much more expensive the the safepal but they all use unencrypted QR codes.

[Lillominato89]

I inform you of a further update, in the dapp section the Binance dapp has been added, which allows you to synchronize the safepal HW with the binance exchange, features that are added to the already present Binance dex dapp. I have to try out the new features these days, at first glance it would seem useful, at least not pay the sending fees, as the coins will remain in our wallet. I will update you when I have more news

I've read somewhere (can no longer find where, sorry) that the QR codes are encrypted. Can anybody confirm if that's the case? If that is true this seems to be a danger. How do we know that some information isn't leaked out to binance labs? There are other air-gaped HW wallets, Cobo vault, ellipal titan. All are much more expensive the the safepal but they all use unencrypted QR codes.

I don't honestly know if the qr codes are encrypted or not, I'll try to find info about it..

[pangu]

Safepal x Harmony Holding Challenge:
https://medium.com/harmony-one/exclusive-for-harmony-swap-hold-one-earn-sfp-c60b3d353014

[intika]

I am highly interested as well in analyzing the qr codes that are being sent by the device... I did scan some of the qr codes from some youtube videos (reviews videos) I did not had the time to fully analyze/reverse the qr code... but it contain the derivation path in clear text... the phone model and I guess its serial are broadcasted to the S1 when coupled over qr codes (the first time)... normally the qr code would contain the different public keys of the different used currencies wallets and may be some additional informations... I really need to look into this to see if there is some leakage and if the wallet can be trusted fully... otherwise I'll test that extensively when I receive mine... but honestly I don't think they will risk their reputation by sending sensitive data like the private key, even encrypted this would ruin them for good and make the device completely useless... anyway I would really love to see this device communicating in a "clear" way; that would make it easily compatible with other app/wallets and would let us check it furthermore... personally I prefer analyzing qr codes instead of bluetooth communication even if it's told "opensource" this word is throwed everywhere now days without real possibility to check what's going on.    

Any way anyone checked the qr-codes?

Aside from that as it's not opensource, I would kind a check manually every qr code on production loool... but at first look it look all legit and working as intended... yet I did not had the time to complete the analysis.

[intika]

Hi

Can anyone help understand the qr code used by the Safepal S1... I extracted the HEX code of the different qr codes from this video https://www.youtube.com/watch?v=-_6uIIgJD7k (sorry I did not take it further i have a limited time for this)

Code:

Safepal S1 - QR-Code Analyze - From : 
https://www.youtube.com/watch?v=-_6uIIgJD7k

Tools : 
https://iancoleman.io/bip39/
and others...
 
-------------------------------------------------------------------------------------------------

Qr-Code Number : 1 (on the paper)
TXT : https://docs.safepal.io/user-manual

-------------------------------------------------------------------------------------------------

Qr-Code Number : 2 (on the device)
TXT : ************************************************************

-------------------------------------------------------------------------------------------------

Seed (no bip39 pass phrase set, the pin code is just for the device's security its not involved in the crypto) : 
phone fee marine embark enrich weasel december sadness woman embrace dog symbol exhaust advance spell voice forget flavor spawn park abuse total egg crack

Root Prv Key
xprv9s21ZrQH143K3APPZKj7bAj9QjtU8xQrEcjkWrccAdJtUCYn59KGkMsjiMqgppKfJUoGg6Bim3dZNjcMhetBaJvSG8CDKt6E3cvqFTrgs56

BIP44 BTC Account Extended Public Key
xpub6CurGnmzinCW9QY77LN1wuLHHjc6JWQ7w2L4F7MtxxPCD8GrVYsasLaGWVZHnRUCGKUDTSukdKSaYN9KHeNy9BftPvWUoSFUMcUJi48FWmq

BIP44 BTC BIP32 Extended Public Key
xpub6EQWSsYokbzLNvmnHgJkHr8VBPeWjRWovg9CzfdFPWreHpPuZwCx8PrAtqRo3g2SNWR85J3iZwHYCHWrE1gmXa54rtAVgqJfpZpPDGTEdLf

First BTC address: 
1J5iPEq5PkCQWbyw88eo5oJ5mXjyzNcKqi

-------------------------------------------------------------------------------------------------

Default coin list : 
- BTC 
- ETH 
- BNB 
- TRX 
- USDT TRC20
- BitTorrent TRC10
- WINK TRC20
- ONE

-------------------------------------------------------------------------------------------------

Device Serial : S1F**************** => HEX : ***********************
Version : 1.0.14-10008

-------------------------------------------------------------------------------------------------

Qr-Code Number : 3 (on the phone)

HEX : ***

TXT : ***
TRX"
ONE"
USDT"	
BTT"
WIN(


BIN : ***

-------------------------------------------------------------------------------------------------
-------------------------------------------------------------------------------------------------

14 Qr codes to link both devices... 

HEX : Original qr code value (Qr codes hex value contains space just for readability...)
TXT : Translation to text
BIN : Translation to binary code

-------------------------------------------------------------------------------------------------
-------------------------------------------------------------------------------------------------

Qr-Code Number : x/14
HEX : 423A69030000 900C1DE1005B0E03F163439EB76E8A1C1C01A91FE973D270ADA8991A3DD227B5483A37923BD02A21029F91E6C6C3A35D5046001CEC6D93FBA316D3DF0BC6D31C318D30B7AF9A102211302C2A6E0A1508021A0C6D2F3434
TXT : B:i....
TXT : B:i��[�cC��n�
��s�p���=�'�H:7�;�*!����ã]PF�m�������1�0���"0,*nm/44
BIN :
010000100011101001101001000000110000000000000000100100000000110000011101111000010000000001011011000011100000001111110001011000110100001110011110101101110110111010001010000111000001110000000001101010010001111111101001011100111101001001110000101011011010100010011001000110100011110111010010001001111011010101001000001110100011011110010010001110111101000000101010001000010000001010011111100100011110011011000110110000111010001101011101010100000100011000000000000111001110110001101101100100111111101110100011000101101101001111011111000010111100011011010011000111000011000110001101001100001011011110101111100110100001000000100010000100010011000000101100001010100110111000001010000101010000100000000010000110100000110001101101001011110011010000110100
GUESS : 

-

Qr-Code Number : x/14
HEX : 423A69030000 8E9C2CEB005B0E013617B66BCF6DAB6FA977525ED822630A164169426A715A3165384133706734414A53766F476B785203505A5512046C756361189E4E20984E2A0F533146303831383237373336363533320957414C4C
TXT : B:i....
TXT : B:i��,�[
6�k�m�o�wR^�"cAiBjqZ1e8A3pg4AJSvoGkxRPZUluca�N �N*S1F0818277366532	WALL
BIN :
010000100011101001101001000000110000000000000000100011101001110000101100111010110000000001011011000011100000000100110110000101111011011001101011110011110110110110101011011011111010100101110111010100100101111011011000001000100110001100001010000101100100000101101001010000100110101001110001010110100011000101100101001110000100000100110011011100000110011100110100010000010100101001010011011101100110111101000111011010110111100001010010000000110101000001011010010101010001001000000100011011000111010101100011011000010001100010011110010011100010000010011000010011100010101000001111010100110011000101000110001100000011100000110001001110000011001000110111001101110011001100110110001101100011010100110011001100100000100101010111010000010100110001001100
GUESS : 

-

Qr-Code Number : x/14
HEX : 423A69030000 0587AFF6005B0E0A80081098D3C7F40D2220F5A8FDC334BC93C862B3C7C5F532DCE8D720F741359832DAB3FECB29BAF3978C2A2102A3F0429DD7D78FF830E07628238DC13CD0C34B88AC2158DB97A4A33DF5EDD0DA302C
TXT : B:i....
TXT : B:i���[�����" ����4���b����2��� �A5�2ڳ��)��*!��B��׏�0�v(#��<��K��!Xۗ��=����0,
BIN :
010000100011101001101001000000110000000000000000000001011000011110101111111101100000000001011011000011100000101010000000000010000001000010011000110100111100011111110100000011010010001000100000111101011010100011111101110000110011010010111100100100111100100001100010101100111100011111000101111101010011001011011100111010001101011100100000111101110100000100110101100110000011001011011010101100111111111011001011001010011011101011110011100101111000110000101010001000010000001010100011111100000100001010011101110101111101011110001111111110000011000011100000011101100010100000100011100011011100000100111100110100001100001101001011100010001010110000100001010110001101101110010111101001001010001100111101111101011110110111010000110110100011000000101100
GUESS : 

-

Qr-Code Number : x/14
HEX : 423A69030000 CF71494D005B0E000A146F62575471447676345943315541367A3177714E10DB011A410436DC1D5AC0C73AAB96A1ABC0B42CFF5C0933CCCF37E233EAF7CAADD920A2718CCCE7EA335283EA7BBE9A5AB7BE404A8F2D901F
TXT : B:i....
TXT : B:i�qIM[obWTqDvv4YC1UA6z1wqN�
A6�Z��:������,�\	3��7�3��ʭ� �q����3R��{��Z��@J�-�
BIN :
010000100011101001101001000000110000000000000000110011110111000101001001010011010000000001011011000011100000000000001010000101000110111101100010010101110101010001110001010001000111011001110110001101000101100101000011001100010101010101000001001101100111101000110001011101110111000101001110000100001101101100000001000110100100000100000100001101101101110000011101010110101100000011000111001110101010101110010110101000011010101111000000101101000010110011111111010111000000100100110011110011001100111100110111111000100011001111101010111101111100101010101101110110010010000010100010011100011000110011001100111001111110101000110011010100101000001111101010011110111011111010011010010110101011011110111110010000000100101010001111001011011001000000011111
GUESS : 

-

Qr-Code Number : x/14
HEX : 423A69030000 BEA3E0FD005B0E075258125508031880808080081098D3C7F40D2220F5A8FDC334BC93C862B3C7C5F532DCE8D720F741359832DAB3FECB29BAF3978C2A2102A3F0429DD7D78FF830E07628238DC13CD0C34B88AC2158DB
TXT : B:i....
TXT : B:i����[RXU��������" ����4���b����2��� �A5�2ڳ��)��*!��B��׏�0�v(#��<��K��!X�
BIN :
010000100011101001101001000000110000000000000000101111101010001111100000111111010000000001011011000011100000011101010010010110000001001001010101000010000000001100011000100000001000000010000000100000000000100000010000100110001101001111000111111101000000110100100010001000001111010110101000111111011100001100110100101111001001001111001000011000101011001111000111110001011111010100110010110111001110100011010111001000001111011101000001001101011001100000110010110110101011001111111110110010110010100110111010111100111001011110001100001010100010000100000010101000111111000001000010100111011101011111010111100011111111100000110000111000000111011000101000001000111000110111000001001111001101000011000011010010111000100010101100001000010101100011011011
GUESS : 

-

Qr-Code Number : x/14
HEX : 423A61030000 CE8EB5BC00550E0DAED97231298642A539343028D1BFF54E562019FF4EF1245ED9708E0D7B8E42A02A2102444FE4FD9428889A8954FAE87B5D484D06755C23E5F0C99E471AFEF3CC56EC4E302CF29604D8
TXT : B:i....
TXT : B:aΎ��U��r1)�B�940(ѿ�NV �N�$^�p�{�B�*!DO���(���T��{]HMu\#��ɞG���V�N0,��
BIN :
010000100011101001100001000000110000000000000000110011101000111010110101101111000000000001010101000011100000110110101110110110010111001000110001001010011000011001000010101001010011100100110100001100000010100011010001101111111111010101001110010101100010000000011001111111110100111011110001001001000101111011011001011100001000111000001101011110111000111001000010101000000010101000100001000000100100010001001111111001001111110110010100001010001000100010011010100010010101010011111010111010000111101101011101010010000100110100000110011101010101110000100011111001011111000011001001100111100100011100011010111111101111001111001100010101101110110001001110001100000010110011110010100101100000010011011000
GUESS : 

-

Qr-Code Number : x/14
HEX : 423A69030000 C4C75F80005B0E0245545F53313A0653315F523433420253314A075361666550616C589A9EA0F20568901C2A6D0A1408011A0B6D2F3434682F30682F306812034254431255080318808080800810EF88B6DB0A2220D904
TXT : B:i....
TXT : B:i��_�[ET_S1:S1_R43BS1JSafePalX����h�*m
m/44h/0h/0hBTCU�����" �
BIN :
010000100011101001101001000000110000000000000000110001001100011101011111100000000000000001011011000011100000001001000101010101000101111101010011001100010011101000000110010100110011000101011111010100100011010000110011010000100000001001010011001100010100101000000111010100110110000101100110011001010101000001100001011011000101100010011010100111101010000011110010000001010110100010010000000111000010101001101101000010100001010000001000000000010001101000001011011011010010111100110100001101000110100000101111001100000110100000101111001100000110100000010010000000110100001001010100010000110001001001010101000010000000001100011000100000001000000010000000100000000000100000010000111011111000100010110110110110110000101000100010001000001101100100000100
GUESS : BTC Qr-Code Block

-

Qr-Code Number : x/14
HEX : 423A69030000 57975C7B005B0E04682F3630682F306812034554481255080318808080800810E0BEFDC1092220F7E72459390A5F6034261D02F5C5ABE6AC6FDF39224FDDF0E3F5991368C60B972A2103697C8FA4576A3519BCBC444298
TXT : B:i....
TXT : B:iW�\{[h/60h/0hETHU�������	" ��$Y9_`4&�ū�o�9"O�����h��*!i|��Wj5��DB�
BIN :
010000100011101001101001000000110000000000000000010101111001011101011100011110110000000001011011000011100000010001101000001011110011011000110000011010000010111100110000011010000001001000000011010001010101010001001000000100100101010100001000000000110001100010000000100000001000000010000000000010000001000011100000101111101111110111000001000010010010001000100000111101111110011100100100010110010011100100001010010111110110000000110100001001100001110100000010111101011100010110101011111001101010110001101111110111110011100100100010010011111101110111110000111000111111010110011001000100110110100011000110000010111001011100101010001000010000001101101001011111001000111110100100010101110110101000110101000110011011110010111100010001000100001010011000
GUESS : ETH Qr-Code Block

-

Qr-Code Number : x/14
HEX : 423A69030000 D22458C9005B0E059FEE167A72A34FA53A1655B86B1F193138E153302C2A6F0A1608041A0D6D2F3434682F373134682F30681203424E42125508031880808080081086E1E8D20C22201FFD2FC752EC6E274F8BEE5F6220
TXT : B:i....                                                                                                                                                                               
TXT : B:i�$X�[��zr�O�:U�k18�S0,*om/44h/714h/0hBNBU��������" �/�R�n'O��_b 
BIN :
010000100011101001101001000000110000000000000000110100100010010001011000110010010000000001011011000011100000010110011111111011100001011001111010011100101010001101001111101001010011101000010110010101011011100001101011000111110001100100110001001110001110000101010011001100000010110000101010011011110000101000010110000010000000010000011010000011010110110100101111001101000011010001101000001011110011011100110001001101000110100000101111001100000110100000010010000000110100001001001110010000100001001001010101000010000000001100011000100000001000000010000000100000000000100000010000100001101110000111101000110100100000110000100010001000000001111111111101001011111100011101010010111011000110111000100111010011111000101111101110010111110110001000100000
GUESS : BNB Qr-Code Block

-

Qr-Code Number : x/14
HEX : 423A69030000 9E940867005B0E06090BBDEECE99B88C6BE7663186FD4FF34AD32A21038786F32F695658FC211084B9400E6AB510AF8E8C9E54461882902221D8B1B9FD302C2A 6F0A1608081A0D 6D2F3434682F313935682F3068 120354
TXT : B:i....                                                                                                                                                      m/44h/195h/0h
TXT : B:i��g[	��I��k�f1��O�J�*!���/iVX�!��@j�����TF��"!ر��0,*om/44h/195h/0hT
BIN :
010000100011101001101001000000110000000000000000100111101001010000001000011001110000000001011011000011100000011000001001000010111011110111101110110011101001100110111000100011000110101111100111011001100011000110000110111111010100111111110011010010101101001100101010001000010000001110000111100001101111001100101111011010010101011001011000111111000010000100010000100001001011100101000000000011100110101010110101000100001010111110001110100011001001111001010100010001100001100010000010100100000010001000100001110110001011000110111001111111010011000000101100001010100110111100001010000101100000100000001000000110100000110101101101001011110011010000110100011010000010111100110001001110010011010101101000001011110011000001101000000100100000001101010100
GUESS : TRX Qr-Code Block

-

Qr-Code Number : x/14
HEX : 423A69030000 E844C31B005B0E0897A4A33DF5EDD0DA302C2A700A17080A1A0D6D2F3434682F313935682F3068120455534454125508031880808080081098D3C7F40D2220F5A8FDC334BC93C862B3C7C5F532DCE8D720F741359832DA
TXT : B:i....
TXT : B:i�D�[���=����0,*pm/44h/195h/0hUSDTU��������" ����4���b����2��� �A5�2�
BIN :
010000100011101001101001000000110000000000000000111010000100010011000011000110110000000001011011000011100000100010010111101001001010001100111101111101011110110111010000110110100011000000101100001010100111000000001010000101110000100000001010000110100000110101101101001011110011010000110100011010000010111100110001001110010011010101101000001011110011000001101000000100100000010001010101010100110100010001010100000100100101010100001000000000110001100010000000100000001000000010000000000010000001000010011000110100111100011111110100000011010010001000100000111101011010100011111101110000110011010010111100100100111100100001100010101100111100011111000101111101010011001011011100111010001101011100100000111101110100000100110101100110000011001011011010
GUESS : USDT TRC20 Qr-Code Block

-

Qr-Code Number : x/14
HEX : 423A69030000 301AD35B005B0E09B3FECB29BAF3978C2A2102A3F0429DD7D78FF830E07628238DC13CD0C34B88AC2158DB97A4A33DF5EDD0DA302C2A6F0A1608091A0D6D2F34 34682F313935682F306812034254541255080318 808080
TXT : B:i....                                                                                                                                       4h/195h/0hBTTU                    €€€
TXT : B:i0�[[	���)��*!��B��׏�0�v(#��<��K��!Xۗ��=����0,*o	m/44h/195h/0hBTTU���
BIN :
010000100011101001101001000000110000000000000000001100000001101011010011010110110000000001011011000011100000100110110011111111101100101100101001101110101111001110010111100011000010101000100001000000101010001111110000010000101001110111010111110101111000111111111000001100001110000001110110001010000010001110001101110000010011110011010000110000110100101110001000101011000010000101011000110110111001011110100100101000110011110111110101111011011101000011011010001100000010110000101010011011110000101000010110000010000000100100011010000011010110110100101111001101000011010001101000001011110011000100111001001101010110100000101111001100000110100000010010000000110100001001010100010101000001001001010101000010000000001100011000100000001000000010000000
GUESS : BitTorrent TRC10 Qr-Code Block

-

Qr-Code Number : x/14
HEX : 423A69030000 E418D4B8005B0E0B2A6F0A16080A1A0D6D2F3434682F313935682F3068120357494E125508031880808080081098D3C7F40D2220F5A8FDC334BC93C862B3C7C5F532DCE8D720F741359832DAB3FECB29BAF3978C2A2102
TXT : B:i....
TXT : B:i�Ը[*om/44h/195h/0hWINU��������" ����4���b����2��� �A5�2ڳ��)��*!
BIN :
010000100011101001101001000000110000000000000000111001000001100011010100101110000000000001011011000011100000101100101010011011110000101000010110000010000000101000011010000011010110110100101111001101000011010001101000001011110011000100111001001101010110100000101111001100000110100000010010000000110101011101001001010011100001001001010101000010000000001100011000100000001000000010000000100000000000100000010000100110001101001111000111111101000000110100100010001000001111010110101000111111011100001100110100101111001001001111001000011000101011001111000111110001011111010100110010110111001110100011010111001000001111011101000001001101011001100000110010110110101011001111111110110010110010100110111010111100111001011110001100001010100010000100000010
GUESS : WINK TRC20 Qr-Code Block

-

Qr-Code Number : x/14
HEX : 423A69030000 C0F9D2A5005B0E0CA3F0429DD7D78FF830E07628238DC13CD0C34B88AC2158DB97A4A33DF5EDD0DA302C2A700A1708061A0E6D2F3434682F31303233682F306812034F4E4512550803188080808008109D9FE8EF082220
TXT : B:i....
TXT : B:i��ҥ[��B��׏�0�v(#��<��K��!Xۗ��=����0,*pm/44h/1023h/0hONEU��������" 
BIN :
01000010001110100110100100000011000000000000000011000000111110011101001010100101000000000101101100001110000011001010001111110000010000101001110111010111110101111000111111111000001100001110000001110110001010000010001110001101110000010011110011010000110000110100101110001000101011000010000101011000110110111001011110100100101000110011110111110101111011011101000011011010001100000010110000101010011100000000101000010111000010000000011000011010000011100110110100101111001101000011010001101000001011110011000100110000001100100011001101101000001011110011000001101000000100100000001101001111010011100100010100010010010101010000100000000011000110001000000010000000100000001000000000001000000100001001110110011111111010001110111100001000001000100010
GUESS : ONE Qr-Code Block

------------------------------------------------------------------
------------------------------------------------------------------

Qr-Code Number : 18 (on the phone)
Add new coin from app (adding LTC) : 
HEX : ***********************

[intika]

Hi again...

Bad news after checking furthermore, the qrcodes can not really be decoded (thus said they does not contain nor private nor public key IN PLAIN text)... they theoretically contains public key in an encrypted manner, Check this official answer -> https://safepalsupport.zendesk.com/hc/en-us/articles/360054745351-Is-it-possible-to-pair-the-SafePal-S1-hardware-wallet-with-other-apps-   

- On the "Pro" side: this is a secure way to communicate and as we somehow trust Binance, we can then trust Safepal.
- On the "Con" side: users/developers can not check what the device is broadcasting on its Qrcodes, and everything is closed source, so no simple decoding possible, and no other application can use Safepal S1 (this is intended by Safepal).

In a business perspective I can understand such move, but this is not a licensed bank this is cryptocurrency and trust need to be proven not just obtained by reputation.
I really really loved this device, its conception, its price... BUT it's not worth of trust at 100% level   I really hope that Safepal will release some documentations, sources code or the used encryption to let the users/developer just be 100% sure of this device. this is not the case right now...

So for those of us that are really maniac about security, Safepal S1 is a strong NO! until Binance/Safepal release something that can proof what's the content of those qrcodes.

Note that I am not against Safepal S1 nor Binance nor did I find an exploit or a bug BUT I am on the side of a 100% proven security not just reputation.

[dkbit98]

On the "Pro" side:[/b] this is a secure way to communicate and as we somehow trust Binance, we can then trust Safepal.

I don't trust Binance or any other exchange, and I still remember then time when someone hacked them, then sold and exposed all customer data online.
Even less I trust their closed source hardware wallet Safepal, because same thing could potentially happen again like for ledger one million customer leak.
Safepal also has one of the cheapest hardware wallets and it is not supporting any other 3rd party wallets software like Electrum for example, and there is no full node support.

Few more negative sides:
- No support for signing messages
- No mulltiple accounts support
- No multi-sig support
- No coin control
- No desktop software available

Here you can check current list of all Open Source Hardware Wallets

[Lillominato89]

hello guys, I've been missing from this forum for a long time and obviously I had also forgotten about this thread of mine that was almost open 2 years ago, I'm going back to update the situation a bit hoping to do something

welcome in the months that followed, the safepal team had made several airdrops of both their SFP token and others they added almost all the chains present how: solana, fantom, polygon, avax, heco, kcc, arbitrum, near, songbird and many others that I can't think of

on the hardware side, I can't think of any particular updates only the multi-account and web extension for desktop browsers

opinions and discussions? I know for sure that many do not trust closed source but I would still like everyone's opinion both for and against

[Pmalek]

For and against open-source?

Open-source is generally better than closed-source, but not necessarily more secure. Open-source allows those who know what they are doing to inspect the codebase. If you can't do that yourself, you can have some comfort in the fact that someone else probably has. This is the case with popular open-source projects. But if we are talking about an unknown and unpopular open-source project, you can't really know who has taken the time to look at the code.

Open-source is a window that you can look through and see what is inside. There are no blinds preventing you to look.   
Closed-source is a window with blinds and you can't see anything inside.

Illegal, immoral, wrong, and dubious activities can take place in both types of apartments. Those that have no blinds on the windows and those that do. When there are no obstacles blocking the vision, it is much easier to see what is happening, right? But you still need to recognize the activities to understand something wrong is happening. In other words, you need to understand how a piece of code works to understand what is not supposed to be there or how it's supposed to look. If you see a pile of white powder through the window with no blinds and you think it's powdered sugar, what good does it do that the windows have no blinds when the wrong set of eyes are looking in? What good does it do if you don't realize the code has a backdoor when you can't understand it.

Open-source allows you to verify the content (good or bad).
Closed-source doesn't allow you to verify anything. It can be good or bad, but you will never know and you are stuck trusting what the developers tell you. 

[dkbit98]

the safepal team had made several airdrops of both their SFP token and others they added almost all the chains present how: solana, fantom, polygon, avax, heco, kcc, arbitrum, near, songbird and many others

I would never waste a single satoshi on buying Safepal wallet, and this is all worthless shitcoins and buying hardware wallet just to get few bucks from some airdrops is not very smart, especially if they are asking for any kind of identity verification.
No need to repeat ourselves about Safepal wallet, just read everything that is written in this topic and know that Safepal has serious flaws in their design.
Kraken team wrote more about Safepal but we also discussed about that in forum so you can check that out:
https://bitcointalk.org/index.php?topic=5317884.0

[Lillominato89]

For and against open-source?

Open-source is generally better than closed-source, but not necessarily more secure. Open-source allows those who know what they are doing to inspect the codebase. If you can't do that yourself, you can have some comfort in the fact that someone else probably has. This is the case with popular open-source projects. But if we are talking about an unknown and unpopular open-source project, you can't really know who has taken the time to look at the code.

Open-source is a window that you can look through and see what is inside. There are no blinds preventing you to look.   
Closed-source is a window with blinds and you can't see anything inside.

Illegal, immoral, wrong, and dubious activities can take place in both types of apartments. Those that have no blinds on the windows and those that do. When there are no obstacles blocking the vision, it is much easier to see what is happening, right? But you still need to recognize the activities to understand something wrong is happening. In other words, you need to understand how a piece of code works to understand what is not supposed to be there or how it's supposed to look. If you see a pile of white powder through the window with no blinds and you think it's powdered sugar, what good does it do that the windows have no blinds when the wrong set of eyes are looking in? What good does it do if you don't realize the code has a backdoor when you can't understand it.

Open-source allows you to verify the content (good or bad).
Closed-source doesn't allow you to verify anything. It can be good or bad, but you will never know and you are stuck trusting what the developers tell you. 

thanks for the exhaustive explanation, I already knew the difference between open source and closed source, however for those like me who don't know anything about programming codes, they still have to rely on information taken from others, but whoever tells me that this person declares that the open one is it clean at the source? who gives me this security? in the end you have to rely on someone. by that it doesn't mean that closed source is more reliable

the safepal team had made several airdrops of both their SFP token and others they added almost all the chains present how: solana, fantom, polygon, avax, heco, kcc, arbitrum, near, songbird and many others

I would never waste a single satoshi on buying Safepal wallet, and this is all worthless shitcoins and buying hardware wallet just to get few bucks from some airdrops is not very smart, especially if they are asking for any kind of identity verification.
No need to repeat ourselves about Safepal wallet, just read everything that is written in this topic and know that Safepal has serious flaws in their design.
Kraken team wrote more about Safepal but we also discussed about that in forum so you can check that out:
https://bitcointalk.org/index.php?topic=5317884.0

I respect your opinion, I opened this topic to do a little review about this product, I never did reseller or referral, however many other multicoin wallets also do airdrop. so the topic doesn't necessarily have to be filled with praise towards safepal but also with talking about the problems. every opinion is always well accepted by me

[taufik123]

-snip-
however many other multicoin wallets also do airdrop. so the topic doesn't necessarily have to be filled with praise towards safepal but also with talking about the problems. every opinion is always well accepted by me

Currently, safepal is no longer providing airdrops like at the beginning of the release. No airdrop really pays off. now only available Gift Box (beta).

I am an old SafePal user and so far using the SafePal hardware wallet there are not many problems, only when I want to enter my wallet the QR Code scanning process is quite tricky, it requires patience because it cannot move at all. maybe also because of the smartphone camera that I use, there is a slight reflection when exposed to light from the safepal hardware screen. It took about 10 minutes to get in.


I also did the latest firmware upgrade for 12/12/2022

Code:

*SafePal S1 V1.0.45
  Released Date: 2022/12/12

- Supported TON
- Supported LUNA(Terra 2.0) DApps

There are also quite a lot of networks currently available, there are around 37 networks support the safepal hardware wallet.

[Lillominato89]

Currently, safepal is no longer providing airdrops like at the beginning of the release. No airdrop really pays off. now only available Gift Box (beta).

it is very strange that it asks you to scan 61 qr codes, for me personally they have never gone beyond 8 qr codes, however the airdrop was only when they launched their token, and then a few other partnerships with other projects. I bought safepal about two years ago and so far never had any problems honestly, not even on qr code scans. thank you for your feedback

[SFR10]

on the hardware side, I can't think of any particular updates only the multi-account and web extension for desktop browsers

Despite knowing that it's not the best HW out there, I was still surprised that it didn't have a single major firmware update in the past year or so ^{[judging by the following "firmware upgrade history" page, it appears that instead of improving the functionality of the device in question, SafePal developers prefer adding support for more shitcoins (SMH)]}.

when I want to enter my wallet the QR Code scanning process is quite tricky, it requires patience because it cannot move at all. maybe also because of the smartphone camera that I use, there is a slight reflection when exposed to light from the safepal hardware screen. It took about 10 minutes to get in.
https://i.postimg.cc/WpZ76Kbz/photo-2022-12-23-21-50-22.jpg

The following things might come in handy:

• If S1 doesn't have a feature to reduce screen brightness, you can try placing a slightly darker acetate paper in front of it to diffuse the light that's coming out of it ^{[it's more useful in darker rooms]}.
• When you want to scan the QR Code, make sure there's more/enough light in the background ^{[it'll be easier for the lenses to focus]}.