SecondFi to shut down after $2.6M Cardano wallet hack as recovery delays fuel user backlash

SecondFi, a Cardano-based wallet service, has announced it will shut down operations following a security breach that saw approximately 16.1 million ADA — worth roughly $2.6 million — stolen from user wallets. The incident, which exploited an encryption flaw in the platform’s wallet software, has left 374 wallets compromised and triggered widespread frustration among affected users.

What happened and who was affected

The hack targeted SecondFi’s wallet infrastructure, which was built on the Cardano blockchain and closely integrated with the Yoroi wallet service. An investigation into the breach has raised the possibility of links to Lazarus, the North Korean state-backed hacking group known for targeting cryptocurrency platforms. As a result of the attack and the ensuing fallout, both SecondFi and Yoroi wallet services are being phased out entirely.

Recovery promises and delays

Initially, SecondFi pledged to support asset recovery within two weeks of the breach. However, the company has since pushed back the launch of a zero-knowledge proof-based recovery tool and an asset transfer function, now expected to arrive in August. This delay has sparked backlash from users who had been waiting for a timely resolution. Many have expressed frustration on social media and community forums, questioning the platform’s commitment to transparency and restitution.

Why this matters for the Cardano ecosystem

The SecondFi incident highlights ongoing security vulnerabilities in decentralized finance (DeFi) infrastructure, particularly for wallet services that handle user funds directly. For Cardano, which has positioned itself as a secure and research-driven blockchain, the hack and subsequent shutdown could erode user trust. The potential involvement of Lazarus also raises broader concerns about state-sponsored threats targeting smaller DeFi platforms.

Conclusion

The SecondFi hack and its aftermath serve as a cautionary tale for the crypto industry. While the company’s decision to shut down may limit further damage, the delayed recovery process and lack of clear communication have damaged its reputation. Affected users now face an uncertain wait for their funds, while the broader Cardano community watches closely for lessons on security and accountability.

FAQs

Q1: How much was stolen in the SecondFi hack?
Approximately 16.1 million ADA, worth about $2.6 million at the time of the breach, was stolen from 374 wallets.

Q2: Will affected users get their funds back?
SecondFi initially promised recovery within two weeks, but the timeline has been delayed to August. The company has introduced a zero-knowledge proof-based recovery tool, but its effectiveness and timeline remain uncertain.

Q3: Is there a connection to North Korean hackers?
An ongoing investigation has raised the possibility of links to the Lazarus Group, a North Korean hacking collective known for targeting cryptocurrency platforms. However, no definitive confirmation has been made public.