SecondFi to wind down after $2.6M ADA theft linked to wallet flawSecondFi will wind down after a $2.6 million ADA theft, while users still await recovery tools that were initially expected within weeks of the exploit.
Reported by Cointelegraph · AI-assisted summary by ChikoCorp AI News Desk
AI-assisted summary based on the linked source. Verify market-moving details at the original publisher before acting.
Cardano-based wallet provider SecondFi announced plans to shut down its SecondFi and Yoroi wallet services following a security breach that resulted in the theft of approximately 16.1 million ADA tokens, valued at about $2.6 million. The attack exploited a cryptographic flaw in SecondFi’s wallet software and affected 374 wallets. An independent investigation conducted by blockchain intelligence firm Groom Lake suggested that the sophisticated external actor behind the exploit may be linked to North Korea’s Lazarus Group, although no definitive attribution has been confirmed.
Nearly a month after initially disclosing the exploit in late June, SecondFi users remain without access to recovery tools or migration options. The company stated it is developing a recovery solution based on zero-knowledge proofs, designed to help users recover assets while minimizing the amount of personal information shared. This tool is still undergoing testing and an independent security audit, with a targeted release date in August. Additionally, SecondFi plans to introduce wallet export functionality to enable users to migrate their assets to other services.
The company has not announced any direct reimbursement or compensation plans from its own funds. This ongoing uncertainty and delay have caused frustration among affected users, some of whom noted that earlier communications had promised recovery options within about two weeks following testing and security reviews. However, the recovery tool is still in development and delayed until the upcoming month.
SecondFi’s responses have not satisfied all users, and the platform’s representatives did not provide comment regarding reimbursement plans by the time of publication. EMURGO, a key entity connected to Cardano, also did not respond to prior inquiries related to the incident. The case highlights ongoing concerns around wallet security and recovery mechanisms in the cryptocurrency ecosystem.