SecondFi, a wallet service for Cardano, is set to cease operations following a serious security breach that resulted in the theft of 16.1 million ADA, valued at approximately $2.4 million, from 374 wallets. The incident was traced back to a vulnerability in the transaction signing software, which enabled hackers to extract private keys from transaction data visible on the blockchain.
Despite having previously secured 129 million ADA, the company announced that it will not resume regular operations after addressing the flaw. Notably, the Cardano network itself remained intact, and users with hardware wallets were not affected by the breach.
Blockchain intelligence firm Groom Lake, engaged by EMURGO, indicated that the primary attacker displayed sophistication and might be linked to North Korea's Lazarus Group, although this connection is not confirmed. Another unrelated attack occurred simultaneously targeting different wallets.
