Atrium Lab | atrium.io

The Asset Recovery Wallet Checker is now live. You can now verify whether your wallet was affected by the incident. The official checker is live at checker.secondfi.io. This is the only official checker. It is hosted on our secondfi.io domain and shared only through @secondfiapp and @secondfi_jp. - It will NEVER ask you to sign a transaction. - Any tool that asks you to sign is not ours and should be treated as fraudulent. This is phase one. In phase two, the checker will show whether your wallet has been affected, alongside an air-gapped transfer option to move assets securely. Important Security Reminder SecondFi will NEVER request private keys, recovery phrases, or wallet credentials, and we will never DM you first. Do not trust any checker, link, or account outside our official channels: ▪️ X accounts: @secondfiapp and @secondfi_jp ▪️ Support portal: support.secondfi.io ▪️ Asset recovery wallet checker: checker.secondfi.io

🛡 Recovery Process Update Your assets remain safe. Our team's full focus is on recovery. Here is where things stand today: How do I check if my wallet is affected? The asset recovery wallet checker is now live: checker.secondfi.io This is the only official checker, hosted on our secondfi.io domain and shared only through @secondfiapp / @secondfi_jp. It is prepared on a best-efforts basis. It will never ask you to sign a transaction. Any tool that does is a scam. This is phase one. In phase two, the checker will show whether your wallet has been affected, alongside an air-gapped transfer option to move assets securely. I am not affected, what are my options? If you wish to migrate, we recommend moving your assets to a newly created wallet using a hardware wallet only. We will release clear, step-by-step migration instructions to guide you through this. I am affected, what do I do? We are working on an onchain recovery tool. For now, submit a ticket at support.secondfi.io and keep your app and seed phrase safe. Recovery instructions will only be released once the Intersect Security Council has completed its review. How do I recover my assets? Our teams are working with the smartest minds in Cardano, who have dropped everything to work on this incident, to develop an onchain claims portal. Which is now in preview mode and will be released soon. Understanding what happened Several auditors and independent experts are analysing onchain activity and validating our findings. Reports are coming, and we intend to share relevant reports once finalised. We cannot share findings before then, as doing so may cause further issues. How do I make a claim? If you want to make a claim, submit your ticket at support.secondfi.io. Please remember: DO - Keep the SecondFi app installed - Keep your seed phrase safe - Use only checker.secondfi.io to check your wallet - Submit a ticket at support.secondfi.io DON'T - Delete the SecondFi app - Share private keys, recovery phrases, or wallet credentials with anyone - Trust any checker, link, or account outside our official channels - Act on messages telling you to move assets or submit wallet information SecondFi will NEVER request private keys, recovery phrases, or wallet credentials. No recovery actions requiring user participation have begun. @secondfiapp / @secondfi_jp remains the official channel for all updates.

Set that reminder! x.com/i/spaces/1qxvv…

Introducing Open USD: a stablecoin built for the internet economy, designed by the businesses growing it. joinopenstandard.com/blog/introduci…

Constitutional Committee elections 2026, facilitated by Intersect 🗳️ Voting open: June 28, 2026 at 9:45PM UTC Voting close: July 23, 2026 at 9:45PM UTC 10 candidates are now up for voting on the Hydra Voting platform. View full candidate profiles, login and ask questions at: hydra-voting.intersectmbo.org/votes/cc-vote-… View live ballot, login and vote at: intersect.ekklesia.vote/ballots/6a3ff1…

As per our previous post: x.com/secondfiapp/st… We have identified the root cause and have since rolled out a patch for all unaffected wallets. This will allow us to resume normal operations soon. ----- Regarding affected wallets, 4 distinct draining events occurred. 3 were executed by external threat actors, resulting in a loss of ~16m ADA across 374 addresses. To prevent total loss during the active exploit, emergency rescue measures were triggered to secure the available ~129m ADA and continues to be routed to an independent, qualified third-party custodian, where they are held securely for the benefit of the affected wallet addresses. An external accounting firm has been engaged for a special audit to independently verify those holdings. We are working to facilitate the verification process so users can claim back their assets safely. Affected users should submit their claim at support.secondfi.io We take this incident seriously and are working to ensure all assets are returned to affected users as soon as possible. As stated, we have identified the root cause, it is at the address level. Please DO NOT RESTORE your recovery phrase into another Cardano wallet, this does not mitigate the security risk. The security risk occurs when an affected user signs a transaction. Further explanation to follow.