SecondFi：已完成受损用户资产最终快照，预计约两周后可开始返还资产
Related
EMURGO announced that SecondFi, the Cardano wallet that was hacked, will permanently cease operations.
ChainCatcher reports that Cardano's founding entity, EMURGO, stated on Monday that SecondFi, the wallet service that suffered a hack, will not resume normal operations even after a security audit is completed. All users are required to migrate their assets through the official recovery process. SecondFi is a rebranded version of the Yoroi wallet and is described by EMURGO as Cardano's largest wallet provider. According to EMURGO's incident report on June 25th, the service suffered four separate wallet thefts on June 22nd, with 374 addresses compromised and approximately 16 million ADA (worth about $2.4 million at the time) stolen. The team also took emergency measures to recover approximately 129 million ADA. EMURGO stated that compromised wallets should be considered permanently exposed at the address and private key levels, and restoring the damaged seed phrase to other wallets cannot eliminate the risk. EMURGO plans to launch an isolated wallet state inspection tool this week, followed by a secure export tool and an offline migration workshop in Tokyo. They are also building a dedicated recovery fund for the on-chain recovery system, and will return assets to affected users after the external audit is completed.
SecondFi: A small number of Cardano wallets have been found to be affected by security issues, and the platform has entered maintenance mode.
According to Foresight News , SecondFi, a custodial financial platform, tweeted that it had discovered a security issue affecting a small number of Cardano wallets. The issue has been brought under control, and affected functionality has been temporarily suspended. To protect users, SecondFi has temporarily entered maintenance mode, suspending all front-end interactions, and users are temporarily unable to trade. The team is working diligently to restore platform functionality.
SecondFi has released an update on the latest theft incident: "Isolation Mode" will be launched this week, and a secure wallet export function is planned for release next week.
PANews reported on July 8th that SecondFi, the Cardano wallet service provider, released an update on the latest theft incident, stating that an "isolation mode" will be launched this week, allowing users to check if their wallet address is involved in the incident and submit a support ticket. Next week, they plan to launch a secure wallet export function, providing a safer wallet migration path for users of different skill levels. SecondFi reiterated that it will provide potential asset recovery solutions for wallets confirmed to be affected through its process, expected to be through zero-knowledge proof-based recovery tools with defined eligibility and terms. The official statement also emphasized that they will not request private keys or seed phrase, and users should only operate through the official website support and designated checking tools.
SecondFi released an update on the progress of user asset recovery: the entire process may take longer than the previously estimated two weeks.
PANews reported on June 29th that SecondFi released an update on its recovery progress, focusing on the return of user assets, secure asset migration, and on-chain recovery solutions. Regarding the assets stolen by the attackers, Emurgo has injected funds into a dedicated asset recovery wallet to return funds to affected users. Assets protected through SecondFi's emergency response are currently safe and available, and the team is negotiating custody and return mechanisms with IntersectMBO. SecondFi stated that it will work with the Cardano community working group to advance the on-chain recovery solution, but the entire process may exceed the previously estimated two-week period. The official statement reiterated that they will not solicit private keys, seed phrase, or send private messages to users in any form; users should only submit support tickets through the official website's support channels.
SecondFi: The final snapshot of affected users' assets has been completed, and asset returns are expected to begin in approximately two weeks.
PANews reported on June 26 that SecondFi, the Cardano wallet service provider, released an update on the theft incident, stating that the team has completed a final snapshot of the affected users' asset balances. Multiple snapshots were continuously recorded during the incident response to serve as the basis for subsequent asset recovery and verification. SecondFi stated that its engineering and security teams are working on an asset recovery plan, and asset returns are expected to begin in approximately two weeks. One week will be used to develop a feasible technical solution, and another week will be used for testing and review. The specific timeline may be slightly adjusted as progress continues. The platform will resume operations only after passing a comprehensive security review. Currently, users only need to submit support requests through the official website's ticket system; no further action is required.
SecondFi: 374 addresses lost approximately 16 million ADA; affected users can submit compensation claims.
PANews reported on June 24 that SecondFi, the Cardano wallet service provider, stated that it has identified the root cause of the recent security incident and deployed patches for unaffected wallets, and is about to resume normal operations. SecondFi disclosed that there were four instances of funds being transferred out during the incident, three of which were carried out by external attackers, resulting in approximately 16 million ADA being transferred from 374 addresses. To mitigate further losses during the ongoing attack, SecondFi initiated an emergency transfer, moving approximately 129 million ADA to an independent third-party escrow institution for safekeeping, and has engaged an external accounting firm to conduct a special audit to facilitate subsequent verification and return of assets to affected addresses.