SafePal said the incident exposed order details tied to nearly 40,000 customers, but private keys, seed phrases, and funds were not affected.