@secondfiapp Something that shouldn't have happened happened. Victims are having a hard time in their daily lives. Do your best. I'll wait.
English
Jacsam
1.2K posts
Jacsam
@j3j30104
I love you guys.Let's be together
대한민국 Katılım Eylül 2016
765 Takip Edilen838 Takipçiler
@secondfiapp This is your fault. If you know your victims are suffering every day, show your full capacity and do your best
English
🛡️ Recovery Process Update
Our team remains focused on returning assets to affected users, and we are making strong progress on a structured recovery and verification process.
Two important updates today:
1. The final balance snapshot has been taken today, Friday 26 June 2026. We have been capturing regular snapshots throughout the incident response, and this final one gives us an accurate, verified record of balances to work from as we prepare recovery.
2. Timing of recovery. Behind the scenes, our engineering and security teams have worked around the clock to validate balances and evaluate recovery mechanisms. This has led to a solution where assets can begin being returned, which we estimate is around two weeks away: roughly one week to reach a working solution, then a week of testing and review. Timing may shift as the work continues but our priority is clear: a safe return of funds and getting SecondFi back online responsibly.
We will resume operations once we are fully confident the platform is secure and all security reviews are complete and we are determined to get there as quickly as we safely can.
For now, the only action required is to submit a support ticket at: support.secondfi.io.
We appreciate your continued patience as we work through this process responsibly and will continue sharing updates as progress is made.
English
@secondfiapp I'll know everything in time, but I'm so frustrated that I can't feel your hard work compared to the pain I've been through. Don't repeat the same thing.. Upload your progress every hour!!😡
English
⚠️ As stated, we have identified the root cause, it is at the address level. Please DO NOT RESTORE your recovery phrase into another Cardano wallet, this does not mitigate the security risk. The security risk occurs when an affected user signs a transaction.
In addition, we are working to facilitate the verification process so users can claim back their assets safely so the above is very important, as it makes claims more difficult.
There has been conflicting advice from different community members in an attempt to be helpful. Do nothing until official steps come from SecondFi.
The only thing you should do is submit a ticket at support.secondfi.io.
We will never DM you first or ask for your recovery phrase.
English
@Xiaohe085 Thank you for your empathy. I believe that if I can get through this situation, I will be stronger. Thanks to the community🙏
English
一个韩国老哥，把养老金全梭哈了 ADA，拿了整整 9 年，将近 100 万个币。
助记词老老实实抄在纸上，只用苹果手机登录官方的 Yoroi 钱包，结果还是被悄无声息地洗劫一空。
隔着屏幕都能感觉到一个中年父亲的绝望和破防。
币圈这座黑暗森林真的太残酷了。
很多时候，咱们这些铁头韭菜每天防狗庄、防插针、防跑路，却很难防黑客看不到的手。
在 Web3 这种无主之地，别去考验人性和代码，还是把资产尽量分散，不要一个钱包放过多资产。
Jacsam@j3j30104
I stayed in Cardano for 9 years. All my properties, Ada (998k), were stolen a day ago. Unbeknownst to me, the transaction was approved and Ada disappeared. Made by the founding organization Emergo, I only used this @secondfiapp wallet on my mobile (iPhone).
中文
It now appears this was a white hat intervention by SecondFi, with around 129.27 million ADA retained to prevent further losses.
My tracing analysis was originally based on the assumption that this was the attacker wallet. That was because funds were actively being moved from affected wallets, which looked like live draining behaviour at the time.
If this was an emergency intervention address, that explains a lot of the behaviour we were seeing on chain.
A large part of the analysis and visualisation I built was therefore mapping this intervention rather than the final attacker flow. I still think the tooling and visual view have value, because they show how the movement of funds looked in real time and help explain why the initial conclusion was reasonable based on available evidence.
I welcome this development and hope every impacted individual is reimbursed properly and transparently.
x.com/secondfiapp/st…
Dave@ItsDave_ADA
Also, I want to be clear on something. There is still a possibility that this could be a white hat intervention or some form of preventative action taken as a last resort. That would help explain some of the behaviour we are seeing, including the initial funding being linked directly to Binance, and the funds still sitting in a consolidation wallet without movement. At this stage, I do not think we can rule that out. Which may bring some positivity to some. More will become clear soon. Funds remain in this wallet as of now.
English
Very good news for everybody affected!
Majority of funds were a white hack, so they can be returned through an official support ticket (careful for scammers!)
> 129m+ ADA continues to be routed to an independent, custodian, where they are held securely
SecondFi@secondfiapp
As per our previous post: x.com/secondfiapp/st… We have identified the root cause and have since rolled out a patch for all unaffected wallets. This will allow us to resume normal operations soon. ----- Regarding affected wallets, 4 distinct draining events occurred. 3 were executed by external threat actors, resulting in a loss of ~16m ADA across 374 addresses. To prevent total loss during the active exploit, emergency rescue measures were triggered to secure the available ~129m ADA and continues to be routed to an independent, qualified third-party custodian, where they are held securely for the benefit of the affected wallet addresses. An external accounting firm has been engaged for a special audit to independently verify those holdings. We are working to facilitate the verification process so users can claim back their assets safely. Affected users should submit their claim at support.secondfi.io We take this incident seriously and are working to ensure all assets are returned to affected users as soon as possible. As stated, we have identified the root cause, it is at the address level. Please DO NOT RESTORE your recovery phrase into another Cardano wallet, this does not mitigate the security risk. The security risk occurs when an affected user signs a transaction. Further explanation to follow.
English
@secondfiapp It's been a hell of a time for me. I look forward to your quick recovery🙏
English
As per our previous post:
x.com/secondfiapp/st…
We have identified the root cause and have since rolled out a patch for all unaffected wallets. This will allow us to resume normal operations soon.
-----
Regarding affected wallets, 4 distinct draining events occurred. 3 were executed by external threat actors, resulting in a loss of ~16m ADA across 374 addresses.
To prevent total loss during the active exploit, emergency rescue measures were triggered to secure the available ~129m ADA and continues to be routed to an independent, qualified third-party custodian, where they are held securely for the benefit of the affected wallet addresses.
An external accounting firm has been engaged for a special audit to independently verify those holdings.
We are working to facilitate the verification process so users can claim back their assets safely. Affected users should submit their claim at support.secondfi.io
We take this incident seriously and are working to ensure all assets are returned to affected users as soon as possible.
As stated, we have identified the root cause, it is at the address level. Please DO NOT RESTORE your recovery phrase into another Cardano wallet, this does not mitigate the security risk. The security risk occurs when an affected user signs a transaction.
Further explanation to follow.
SecondFi@secondfiapp
To provide more clarity, we have identified the nature of the incident, it is at the address level. The security risk affects wallet users when a transaction is signed. Therefore recovery to another platform or wallet does not mitigate the risk. 🚨 DO NOT restore your recovery phrase into a new Cardano wallet. We have isolated the affected wallets and will post mitigation steps shortly.
English
The secondfi hack today has set my family back decades. I dont know what to do, i have been up for 19 hours staring at my computer. I did everything right.. i havent even eaten today, today was a sad day for cardano and everyone affected. shameful
English
@JaromirTesar Countless Cardano users are suffering from @secondfiapp Are you going to continue to ignore it like that? If this isn't resolved quickly, there is no future for Cardano.
English
This is very accurate. Long-term Cardano sustainability depends on a huge number of low-fee transactions.
Input Output Group@IOGroup
The road to Cardano 2030 runs straight through Leios, and the testnet goes live this week. @lilybrodi and @cwpaulm interview @carloslodelar, who breaks down how this scaling breakthrough unlocks massive throughput and locks in the network's long-term sustainability.
English
@secondfiapp I spent hours asking the same question and waiting all night. When will you answer? I ignored your ticket and didn't even look at the x to ask for answers on progress and compensation. Is anyone else writing?
English
@j3j30104 Please go to support.secondfi.io to submit a ticket so our team can assist you directly.
English
너무 힘드네요 9년간 축적한 내 전재산이 나도 모르는 사이 도둑질 당해서 뜬눈으로 밤새 @secondfiapp 공지를 기다려 봐도 아무 말도 없고 커뮤니티에서 목소리를 내야하는 사람들도 조용히 있고 숨을 쉬기가 힘듭니다.ㅠ
한국어
If you are affected from these attacks, please do take a moment, its extremely tough. I do think, based on what I currently know that you will be rightfully reimbursed. I've had some extremely difficult dms to read today, do take a moment and wait for future announcements which I believe you will welcome.
Additionally, we will not let this pass, we will not let people attack this community.
We are coming for you.
Dave@ItsDave_ADA
Trace activity actively watching address: addr1qxd39k4peszxlf0x59e88hngpe5u9882y2lyhdzazsq4kfvmztd2rnqyd7j7dgtjw00xsrnfc2ww5g47fw6969qptvjshwxpl3 Holding 129.43 million ADA of stolen funds due to the attack, we will keep the heat on any movement of these assets, there is a community effort to inform CEX's including Binance. Again, I urge the attacker to refund the balance. @emurgo_io I suggest a public wallet where these funds can be refunded. cexplorer.io/address/addr1q…
English
한국어
@eowhd22 @secondfiapp 정말 안타깝습니다... 국내에서도 피해자가 생각보다 많네요. 우선 지인분께 수신자와 트랜잭션, 탈취된 자산에 대한 기록을 남겨놓고 추후 이머고 공지에 맞춰서 대응하셔야할 것 같습니다... 저도 같이 목소리 내겠습니다..
한국어
I think the hacking incident involving @secondfiapp is one of the worst things that should never have happened.
The fact that users lost funds through a wallet service run by one of Cardano’s founding entities is simply unacceptable. It’s embarrassing and deeply disappointing.
This should never have happened, and @emurgo_io must be held accountable for it.
SecondFi@secondfiapp
🚨 An Important Security Update from the SecondFi Team We identified a security issue impacting a small number of Cardano wallets on our platform. We have contained the issue and paused the affected functions. Our engineering teams are actively working to restore full functionality to the platform. To protect our users, SecondFi has been temporarily placed into maintenance mode. All front-end interactions are paused.
English
family, I am in unspeakable sadness and pain today. Can I recover from this? Is it a mistake to trust @cardano, @IOHK_Charles @emurgo_io? I feel shabby writing this after losing everything. People who have not been directly attacked will be left alone.
English
The restoration statement was kept safe on paper. My mistake was that I trusted this Yoroi wallet. I put all my money into my retirement savings a few years ago. I bought Ada for everything but living expenses. That's how much I trusted and supported Ada. As a father in the
English
I stayed in Cardano for 9 years. All my properties, Ada (998k), were stolen a day ago. Unbeknownst to me, the transaction was approved and Ada disappeared.
Made by the founding organization Emergo, I only used this @secondfiapp wallet on my mobile (iPhone).
English
@secondfiapp It's such a cruel day for someone who believed and supported Cardano for a long time ㅠㅠ너무
English
🚨 SECURITY UPDATE: Root Cause & Blast Radius Confirmed
We have isolated the root cause of the recent security incident. The issue was confined to our native Cardano web wallet generation software.
Our team has completed an onchain analysis to determine the scope of impact, and we are now finalizing an independent technical review with a leading blockchain security firm to validate our findings.
English
@YoroiWallet @emurgo_io @secondfiapp I just updated my wallet. I can't find the staking reward withdraw.
English
Yoroi Wallet has evolved into a neofinance platform, built for the future of finance. Open the app today to experience @secondfiapp. 🟦
SecondFi is your second home for money.
Spend, send, stake, swap, save.
Yoroi DRep and stake pools remain unchanged.
App updates will be rolled out throughout the day.
English
日本の皆さんへ、このウェブサイトに日本語対応を追加しました。気に入っていただけると嬉しいです。
Dave@ItsDave_ADA
How much has your DRep spent against this year's Net Change Limit? I built governance.cardano-visualisation.com to answer that question, but over a few evenings of coding it's quietly grown into a small Cardano governance-analytics platform. Still rough, plenty more things to change, but the core idea matters to me. Every YES on a treasury-withdrawal proposal is real ADA leaving the treasury. It's easy to lose sight of that one vote at a time. This site puts every DRep's YTD spend up against the Constitutional NCL so it's all visible in one place. Connect your wallet and you'll be taken straight to your DRep. Feedback and ideas welcome, there's a lot more I want to add, hope you like it.
日本語