SecondFi Shuts Down After $2.4M ADA Heist via Vulnerable Transaction Signing Software

SecondFi, a Cardano wallet service, is shutting down after attackers exploited a vulnerability in its transaction signing software to steal $2.4 million worth of ADA from 374 wallets.

The breach occurred when attackers derived private key material from blockchain transaction data visible on the Cardano network, allowing them to access funds secured by SecondFi. The wallet service reported that it had secured 129 million ADA before the attackers could reach the stolen funds.

EMURGO's funded asset recovery wallet is expected to be available in early August, and a zero-knowledge recovery portal will follow shortly after. However, no distribution date has been given for the recovered funds.