The incident was linked to a flaw in transaction signing software, which allowed attackers to extract private keys from blockchain transaction data.
By Francisco Rodrigues|Edited by Jamie Crawley Jul 22, 2026, 11:10 a.m. 1 min readMake preferred on ShareShare this articleCopy linkX (Twitter)LinkedInFacebookEmailMake preferred on Glasses in front of monitors with code (Kevin Ku/Unsplash)SummaryShow- SecondFi, a Cardano wallet, is shutting down after a software vulnerability led to the theft of 16.1 million ADA, valued at approximately $2.4 million, from 374 wallets.
- The breach resulted from a flaw in transaction signing software that allowed attackers to derive private keys from visible blockchain transaction data.
- SecondFi plans to provide wallet export tools in early August and a recovery portal later that month, although a specific date for fund distribution has not been set.
SecondFi, a wallet service for Cardano, is set to close after a significant exploit in its transaction signing software allowed hackers to steal 16.1 million ADA, equating to around $2.4 million, from a total of 374 wallets.
This service, which was intended to replace EMURGO’s Yoroi wallet, announced it would not return to regular operations even after addressing the vulnerability, having previously safeguarded 129 million ADA before the attackers could access those funds.
The vulnerability permitted attackers to extract private key information from transaction data that was publicly accessible on the Cardano blockchain, according to SecondFi. Importantly, the Cardano network itself was not compromised, and users of hardware wallets remained unaffected.
Groom Lake, a blockchain intelligence firm engaged by EMURGO, identified that the primary attacker appeared to be both sophisticated and well-funded. There are indications suggesting a possible link to North Korea’s Lazarus Group, although this attribution is not confirmed, the firm noted.
During the same time frame, another attacker targeted a different group of wallets.
SecondFi is expected to roll out wallet export tools in early August, along with a zero-knowledge recovery portal later that month. EMURGO has established an asset recovery wallet, but a definitive date for distributing recovered funds has not yet been announced.
CardanoWeb3Latest Crypto News- 1Midnight token rebounds 19% after Wanchain bridge hack, Hoskinson calls for ZK revamp15 minutes ago
- 2Here's why bitcoin bulls should take a closer look at interest rates37 minutes ago
- 3Bitcoin retreats from one-month high as oil tops $85, inflation concerns resurface1 hour ago
- 4Kraken parent expands tokenized stocks to Hong Kong, UK and South Korea equities1 hour ago
- 5Balance stablecoin collapses 99% after $1 million exploit drains its bitcoin vaults2 hours ago
- 6Live updates: Bitcoin slips under $66,000 as oil's surge sacks strength from risk markets3 hours ago
- 7AI models escaped OpenAI’s sandbox and hit Hugging Face. Crypto is where that gets dangerous5 hours ago
- 8Bitcoin holds near $66,300 as chips extend their rally and the yen hits a 40-year low6 hours ago
- 9Crypto lobby group Digital Chamber sues Illinois to block digital asset tax13 hours ago
- 10Crypto Clarity Act still at mercy of ethics section as Democrats balk at Trump deal14 hours ago
TRON Network - Q2 2026
TRON Network - Q2 2026
In Q2; TRON's stablecoin dominance rose to 28.7%, USDT supply on TRON hit $89B ATH, $89M in protocol fees (2nd to Hyperliquid), TRX +3%, and deepening institutional & agentic reach.
By CoinDesk Research23 hours agoCommissioned byTronIn Q2; TRON's stablecoin dominance rose to 28.7%, USDT supply on TRON hit $89B ATH, $89M in protocol fees (2nd to Hyperliquid), TRX +3%, and deepening institutional & agentic reach.
Why it matters:
In Q2; TRON's stablecoin dominance rose to 28.7%, USDT supply on TRON hit $89B ATH, $89M in protocol fees (2nd to Hyperliquid), TRX +3%, and deepening institutional & agentic reach.
View Full ReportMore From Web3