SecondFi 恢复更新：曾向第二名攻击者发出白帽解决方案，提议未获回应
Related
SecondFi: 374 addresses lost approximately 16 million ADA; affected users can submit compensation claims.
PANews reported on June 24 that SecondFi, the Cardano wallet service provider, stated that it has identified the root cause of the recent security incident and deployed patches for unaffected wallets, and is about to resume normal operations. SecondFi disclosed that there were four instances of funds being transferred out during the incident, three of which were carried out by external attackers, resulting in approximately 16 million ADA being transferred from 374 addresses. To mitigate further losses during the ongoing attack, SecondFi initiated an emergency transfer, moving approximately 129 million ADA to an independent third-party escrow institution for safekeeping, and has engaged an external accounting firm to conduct a special audit to facilitate subsequent verification and return of assets to affected addresses.
SecondFi: Security incident affects approximately 16 million ADA; issue stems from web wallet generation software.
PANews reported on June 24th that SecondFi, a Cardano ecosystem project, released a security incident update, stating that the root cause has been identified and the issue is limited to its native Cardano web wallet generation software. The initial estimate of the total impact is approximately 16 million ADA (currently worth about $2.42 million). The team has completed on-chain analysis and is conducting an independent technical review with a blockchain security company to verify the results. The platform remains in security maintenance mode, and a full snapshot of the balance has been taken. For affected users, the team has taken extraordinary measures to protect their remaining assets and will strive to compensate them.
SecondFi: A small number of Cardano wallets have been found to be affected by security issues, and the platform has entered maintenance mode.
According to Foresight News , SecondFi, a custodial financial platform, tweeted that it had discovered a security issue affecting a small number of Cardano wallets. The issue has been brought under control, and affected functionality has been temporarily suspended. To protect users, SecondFi has temporarily entered maintenance mode, suspending all front-end interactions, and users are temporarily unable to trade. The team is working diligently to restore platform functionality.
EMURGO announced that SecondFi, the Cardano wallet that was hacked, will permanently cease operations.
ChainCatcher reports that Cardano's founding entity, EMURGO, stated on Monday that SecondFi, the wallet service that suffered a hack, will not resume normal operations even after a security audit is completed. All users are required to migrate their assets through the official recovery process. SecondFi is a rebranded version of the Yoroi wallet and is described by EMURGO as Cardano's largest wallet provider. According to EMURGO's incident report on June 25th, the service suffered four separate wallet thefts on June 22nd, with 374 addresses compromised and approximately 16 million ADA (worth about $2.4 million at the time) stolen. The team also took emergency measures to recover approximately 129 million ADA. EMURGO stated that compromised wallets should be considered permanently exposed at the address and private key levels, and restoring the damaged seed phrase to other wallets cannot eliminate the risk. EMURGO plans to launch an isolated wallet state inspection tool this week, followed by a secure export tool and an offline migration workshop in Tokyo. They are also building a dedicated recovery fund for the on-chain recovery system, and will return assets to affected users after the external audit is completed.
SecondFi: The root cause of the security incident lies at the address level. Users are advised not to restore seed phrase to other wallets.
According to Foresight News , SecondFi, a Cardano ecosystem project, has released a security update confirming that the root cause of the security incident lies at the address level. The official statement explicitly states that users should not restore the seed phrase of affected wallets to other Cardano wallets, as this will not reduce the security risk, which will be triggered when users sign transactions. The team is currently working on the asset recovery verification process and emphasizes that users should wait for official guidance and not follow community suggestions. The only recommended action at this time is to submit a support ticket. According to a previous report by Foresight News , SecondFi stated that it has identified the root cause of the recent security incident and deployed patches for unaffected wallets, and is about to resume normal operations. SecondFi disclosed that there were four instances of funds being transferred out during the incident, three of which were carried out by external attackers, resulting in approximately 16 million ADA being transferred from 374 addresses. To mitigate further losses during the ongoing attack, SecondFi initiated an emergency transfer, moving approximately 129 million ADA to an independent third-party escrow institution for safekeeping, and engaged an external accounting firm to conduct a special audit to facilitate subsequent verification and return of assets to affected addresses.
On-chain tracing has once again sparked allegations that Cardano's founders sold 1.5 billion ADA tokens during the 2021 bull market.
PANews reported on June 11 that, according to The Defiant, on-chain tracing has once again sparked allegations that Cardano founder Charles Hoskinson sold approximately 1.5 billion ADA during the 2021 bull market. NFT creator Masato Alexander released on-chain analysis claiming that the large ADA transactions during this period had shorter paths to IOG-related staking pools, reducing the number of intermediate steps from approximately 40 to 1-7. His tracing focuses on two transactions: a transfer of 925 million ADA and nine payments of 20 million ADA each. Hoskinson has not yet responded. The Cardano Foundation responded, stating, "Cardano has three separate founding entities: IOG, Emurgo, and the Cardano Foundation."