SecondFi will gradually shut down wallet services due to the theft of 2.6 million USD in ADA

Cardano ecosystem wallet SecondFi stated that approximately 16.1 million ADA were stolen due to a vulnerability in the wallet software, valued at about 2.6 million USD. The platform will gradually shut down SecondFi and Yoroi wallet services. This incident affected 374 wallets.

SecondFi indicated that an independent investigation by blockchain intelligence agency Groom Lake identified the attacker as a sophisticated external actor and found indicators possibly related to North Korea's Lazarus Group, but attribution has not yet been confirmed. SecondFi is developing a recovery tool based on zero-knowledge proofs to help affected users recover their assets and limit the information that needs to be shared. The tool is still in testing and will undergo third-party auditing before its planned release in August. SecondFi is also preparing a wallet export feature that allows users to migrate their assets to other services. The platform has not announced a direct compensation plan and has not specified whether it will use its own funds to compensate users.