SecondFi Shuts Down Following $2.4 Million ADA Theft Incident

SecondFi will cease operations due to a security breach that allowed attackers to steal 16.1 million ADA, worth about $2.4 million, from 374 wallets. This incident occurred as a result of a vulnerability in the transaction signing software, which enabled the derivation of private keys from transaction data on the Cardano blockchain.

Despite the breach, SecondFi stated that the Cardano network itself was not compromised, and users relying on hardware wallets were unaffected. The exploit led to substantial damage before SecondFi secured an additional 129 million ADA, preventing further theft at the time.

According to Groom Lake, a blockchain intelligence firm employed by EMURGO, the attack showed signs of sophistication, with some indicators suggesting involvement from North Korea’s Lazarus Group, although this attribution remains unconfirmed. There was also a report of a separate attack on another set of wallets coinciding with the SecondFi incident.

As part of the shutdown process, SecondFi plans to introduce wallet export tools in early August and will launch a zero-knowledge recovery portal later that month. However, they have not provided a clear timeline for the distribution of recovered funds.

"The breach highlighted significant vulnerabilities in our transaction security," said a spokesperson from SecondFi. The company will not resume normal operations despite addressing the initial vulnerability, focusing instead on supporting affected users as they exit the market.