SecondFi to Close Following $2.4 Million Theft of ADA Wallets

SecondFi to Close Following $2.4 Million Theft of ADA Wallets

SecondFi has announced it will cease operations after a significant theft of funds due to a security breach in its transaction signing software. This exploit resulted in the loss of 16.1 million ADA, which is valued at approximately $2.4 million, from a total of 374 wallets.

Details of the Exploit

The breach was caused by a vulnerability that allowed attackers to derive private keys from transaction data visible on the Cardano blockchain. As a result of this security flaw, SecondFi was unable to maintain its operations, despite having addressed the vulnerability after the incident. Prior to the theft, the platform had successfully secured 129 million ADA against potential theft.

Investigation and Implications

While the Cardano network itself remains intact, hardware wallet users were found to be unaffected by this incident. Blockchain intelligence firm Groom Lake, hired by EMURGO, indicated that the attack likely involved a well-funded and sophisticated group. Some intelligence points to the involvement of North Korea’s Lazarus Group, but no direct attribution has been confirmed.

Future Steps for SecondFi Users

In light of the closure, SecondFi is expected to introduce wallet export tools in early August and a zero-knowledge recovery portal later in the month. EMURGO has initiated the establishment of an asset recovery wallet, though no specific timeline for distribution has been provided.