SecondFi To Cease Operations Following $2.4M Cardano Wallet Breach

Cardano wallet @secondfiapp is closing permanently after a software exploit allowed attackers to steal 16.1 million $ADA, worth roughly $2.4 million, from user wallets. The project, which was developed by Emurgo as a successor to the widely used Yoroi wallet, confirmed it will not resume normal operations following the breach.

How the Exploit Worked

The breach stemmed from a vulnerability in SecondFi's proprietary wallet generation software. A flaw in deterministic nonce derivation allowed external threat actors to reconstruct private keys using publicly available on-chain data, enabling unauthorized access when affected users signed transactions. The issue was isolated to the address level rather than a broader protocol weakness in Cardano itself.

According to official updates, four draining events took place. Three were carried out by external attackers, resulting in the loss of approximately 16 million ADA, valued at around $2.4 million, from 374 wallet addresses. In response, SecondFi immediately placed the platform into maintenance mode, paused front-end interactions, and triggered emergency rescue measures, which successfully secured an additional 129 million ADA by routing the funds to an independent third-party custodian before further losses could occur.

The total potential exposure from the incident, including NFTs and various tokens held across compromised wallets, is estimated to exceed $20 million pending an ongoing audit.

Shutdown and Recovery Plans

SecondFi is shutting down permanently, and will not resume normal operations even after audits are complete. The firm's focus shifts entirely to asset recovery for affected users. SecondFi will release wallet export tools in early August and a recovery portal later that month, though no distribution date for recovered funds has been set.

SecondFi is not alone in winding down. Ctrl Wallet is also shutting down its main features on August 3, 2026, after a June security breach linked to Cardano wallets and the SecondFi platform. Users will be able to send, receive, swap tokens, and interact with decentralized applications only until August 2. Beginning August 3, the wallet will enter an export-only mode, allowing users to access and export their recovery phrases but disabling all other functionality. Users who rely on the mobile application or browser extension must either transfer their assets to another wallet or exchange, or export their recovery phrase before the shutdown date.

The twin closures highlight growing pressure on wallet providers in 2026. RootData counts 79 crypto projects that have closed, entered bankruptcy, or gone dark through 2026, spanning wallets, DeFi protocols, NFT platforms, and more.

Sources:
CoinDesk: SecondFi to shut down after $2.4 million ADA wallet theft
Crowdfund Insider: SecondFi Outlines Recovery Plan After $2.4 Million Cardano Wallet Breach
Crypto Times: Ctrl Wallet to Fully Shut Down by August 3