RESOLVE CORE

Recovery is possible💯 #bankscam #CryptoScam #DrainedWallet #scammers “Time is of the essence”

@ShawnHuolihan What actions have you taken to address this so far?

@crypto_addict1 @secondfiapp i know mine arent. wallet was drained jan 21. I want to know WHEN I GET THEM BACK @secondfiapp.

⚠️ As stated, we have identified the root cause, it is at the address level. Please DO NOT RESTORE your recovery phrase into another Cardano wallet, this does not mitigate the security risk. The security risk occurs when an affected user signs a transaction. In addition, we are working to facilitate the verification process so users can claim back their assets safely so the above is very important, as it makes claims more difficult. There has been conflicting advice from different community members in an attempt to be helpful. Do nothing until official steps come from SecondFi. The only thing you should do is submit a ticket at support.secondfi.io. We will never DM you first or ask for your recovery phrase.

@Newton__Iv What actions have you taken to address this so far?

I just noticed I got wallet drained 11 days ago and the hacker converted my funds to WBNB and sent them to a bridge website. My savings and investments gone just like that 🤦🏽‍♂️

@reetesheth What actions have you taken to address this so far?

My MacBook was compromised today, and the attacker gained access to my wallet and drained approximately $5,500 USD, including funds connected through Lighter. I’m still investigating how this happened. If anyone can help trace the funds or provide guidance, I would be extremely grateful. Victim Address: 0x6d49196f372bb69727072d02fe8e4c61bc96172f Attacker Address: 0xe94667d85ae6050Dbb41E63109BC303759876cbA Any help or retweet is appreciated. Thank you. #CryptoSecurity #WalletHack @zachxbt @impranavm_

@SOLDEARLY_SOL @phantom What actions have you taken to address this so far?

@Fitzybrypto @phantom @phantom got my wallet drained by recreating a 2 year old compromised wallet that's been deleted when i hit create new wallet other day fuck phantom

Crypto used to be about decentralisation now we got wallets like @phantom that won’t verify the boob token because it’s called boob even though it’s literally partnered with a breast cancer charity and has raised 6 figures in donations.

@MMercer25603 What actions have you taken to address this so far?

@P3b7_ I wasn't even using the wallet and my funds were drained

🚨SecondFi: more than $20M stolen, or taken hostage - When the nonce is predictable, the key is public. Last Tuesday, SecondFi wallets were drained at scale. Users were doing nothing exotic, just signing transactions like any other day. Then the funds were gone. ▶️What happened. Two waves. First, external attackers drained wallets: ~16M ADA plus NFTs, around $2.5M. Then a much larger move: ~129M ADA, around $20M, swept by SecondFi itself to a third party custodian, "to keep it safe." Users were robbed by attackers, and users were swept by the platform!! ▶️The bug. Every signature scheme in this family uses a per signature secret number, the nonce. The one rule: it must be secret and unpredictable. EdDSA (Ed25519, what Cardano uses) makes it deterministic on purpose, derived from the private key and the message together. Deterministic, but secret. The secret input is the whole point. SecondFi's implementation derived it from public data alone. The nonce stopped being secret. Public in, public out. ▶️Why it is fatal. Call it what it is: worse than nonce reuse. Reuse needs two signatures from the same key to recover it. Here the nonce can be recomputed by anyone from data already on chain, so a single signature is enough to reconstruct the private key. Every transaction a user ever signed is a public disclosure of their key. I pulled signatures off chain and rebuilt the keys to confirm. One signature, every time. The chain was not attacked. It was read. ▶️The "rescue." The second wave was the platform sweeping ~129M ADA to a custodian, framed as protection. The fix for "your keys are cryptographically exposed" was "trust us to give it back." A cryptographic failure patched with a social promise. "We will return the funds" is not "we are cryptographically incapable of keeping them." The incident did not create that gap. It made it visible. ▶️The ownership trap. Once a key is publicly reconstructible, holding it proves nothing. Attacker, custodian, original user: three parties, same cryptographic claim. So how does a real owner prove it? The elegant exit is a zero knowledge proof of knowledge of the 24 words, the seed, without revealing it. Knowledge of the mnemonic is the one thing a chain scraper does not have. Prove the preimage, not the key. ▶️ How did it get in? Honest mistake, or planted? Dropping a single secret input from the nonce is a tiny change. Exactly what a tired engineer ships, and exactly what a supply chain or insider attacker plants, because it is deniable and pays out silently to whoever reads the chain. I do not know which one this was. The commit history will tell. Cryptography does not care about good intentions. It enforces what you built. SecondFi built a scheme where the nonce was predictable, so the keys were public, so the funds were anyone's. The rest is just who read the chain first. Stay safe. -- (obv, Ledger users are not affected. Nonce and signatures are computed inside the secure element)

@XROD_33 @Cardano What actions have you taken to address this so far?

@ecisnerosdev @ShawnHuolihan @secondfiapp @emurgo_io @Cardano They drained my wallet too I recieved only a email saying don’t do anything just wait but damn this really sucks!Now I dont trust were to deposit my Crypto I don’t know if Lace is safe, eternl etc And I thought because Emurgo is 1 of thefounding entities of Cardano i it felt safe

Hey @secondfiapp @emurgo_io since we only get one communication per day. can todays communication be how and when we will be getting our assets back?? People are already extremely pissed and frustrated no sence in making it worse by not effectively communicating. @Cardano $ADA.

@ecisnerosdev @Cardano What actions have you taken to address this so far?

@ShawnHuolihan @secondfiapp @emurgo_io @Cardano People need answers. Uncertainty and helplessness are not good. We need @emurgo_io and @secondfiapp to take responsibility and provide at least an estimated timeline for when we will be able to see our assets in our wallets again

@ShawnHuolihan @emurgo_io @Cardano What actions have you taken to address this so far?

@VeronicaPh77921 Send a DM with any available evidence, let's assist you

@Resolve_core1 No

Everyone did you think there ate so many bots here using my profile picture 📸 A: Yes B: No

@maxime2zblack @charlieykim @MeghanMess What actions have you taken to address this so far?

@nextjump @charlieykim @MeghanMess @charlieykim @MeghanMess Please help You talk about injustice all day I got scammed from someone using your website Ive been trying to get in contact with your support team for months Please answer 🙏

"I will not admit to a crime I didn't do." So they fought. Against the odds. For 958 days. @charlieykim & @MeghanMess reflect on all ways the DOJ tried to take them down: ↳ 400+ motions filed ↳ 10 million pages of documents ↳ New evidence batches — two dozen times ↳ Pursued inditing the company (twice) ↳ Threatened to indict employees ↳ Threatened to indict investors ↳ Plea deal offered — 4 years ↳ Pressured again — 2 years ↳ Their own lawyers said take the deal, you don’t win against the government May 18th, 2026. Full acquittal. All charges. Ep 280 of Leadership in Practice-- Leadership Lessons from THE Crucible — Meghan and Charlie unpack it all: edu.perksatwork.com/course/leaders…

@MintuKumar17715 What actions have you taken to address this so far?

@Jayecane Yes please! I just got scammed this week out of $6000 on the internet ( of my savings)!!! I need this money so badly!

I want to send you $8,000 to give you a push in your financial situation

@Joneemartian What actions have you taken to address this so far?

I wish I knew how to really contact QFS as on Telegram I've been scammed by 4 different Susie Wiles with identical profile pictures. She wanted to transfer a bunch of money me for my TBR (scammed again) but I had to send them $2,000 first. I wish I could believe in QFS but it all seems to be just one big scam!

NEWS SOURCES OF OFFICIAL FINANCIAL INFORMATION SUBJECT: Situation report  OPERATIONAL EXECUTION PHASE: Dear Collaborators and Clients - Summary of the Current Situation: Execution Status - Transfers from buyers to paymasters and major financial institutions have been confirmed, with deposits already made to the destination accounts. Bank Processing: Operations in the QFS and SWIFT systems are progressing in parallel and in a coordinated manner. Institutions such as Barclays and Wells Fargo have begun processing payments and issuing payment links. Distribution schedule:  A Three (3) Phase payment schedule has been established:  Part One: June 19 to the 25th includes 1% Advance payments to bondholders.  Part Two: June 26 to July 4th.  Part Three: July 5th to July 16th.  Level 4B - This level is expected to be activated by the middle of this week. (We did say Wednesday, didn't we?) Once the preliminary operational processes are completed.  Management Guidelines: We reiterate that the process is being carried out under strict security protocols. Any occasional delays are due to these measures and not to operational blockages. We ask you to remain calm, maintain operational silence, and exercise patience, avoiding unnecessary inquiries that may interfere with workflows. Any official updates will be communicated to you promptly. THIS IS THE LATEST INFO (ENCRYPTED): Greetings  - The flow has accelerated. Bond funds are now moving so rapidly through payment channels that even experts are astonished by the volume. What used to be delayed for months is now arriving in waves. Therefore, Private Appointments have been scheduled discretely and continuously. This phase is no longer about waiting - it is about being prepared. Some things are absolutely clear: There will be NO direct cash payments. You will have full control of your funds. Multiple accounts and structures can be created immediately. Certified Advisors will be available to assist you with asset management, project selection, and long-term planning. This is structured wealth management - not just a simple handout. Prepare your plans and projects now. Those who arrive without a clear direction will receive guidance, but those who arrive prepared will progress faster. Project financing options are already defined within the system. Security remains strict. Yes, there are still forces opposed to the completion of this transition, but all channels confirm the process is safe and stable. You can bring companions to your appointment, financial advisors, bank contacts you have already spoken with, friends of trusted individuals, or anyone you choose to assist you.  INFORMATION ON ZIM CAP: This is updated daily, but for now, the structure is as follows: Without a project payment of 15 million, regardless of the amount.  With Approved Projects: First two projects at 1:1  - afterwards 25 million for every 100 billion - up to a maximum of 30 bonds. A new appointment is required for subsequent negotiations. A secure 800 number will be published close to the start date.  Do NOT trust Unofficial links. Rates are extremely high.  This is NOT speculation - it is internal information. We are very close to the end of the road.  All current info points to the same date: Next week. Stay prepared. Stay organized. The moment is approaching. Follow the signal. The Green Light has been given. Most will find out later, some will see it first.  The above came in this morning in the Spanish Channel.  Yesterday on the live call, everything is pointing toward Wednesday. We are still looking at Wednesday, but everything depends on Reno. I do not know the time in Reno right now (at the time of this transcription, it is 3:40 pm in Reno, per Carpathia). We will wait for what is happening in Reno, as it is the starting point, and they will let me know what it starts for the bondholders. For the 4B, we are waiting for this to happen, hopefully today or by tomorrow - you will get those notifications coming in.  This is it for the moment. Pray to God, this is our day. H/T Mike Bara

@PaulChaffee3 Have you found any legitimate help to recover your scammed funds?

This Muslim disease must be eradicated now!

@Jackyb0yyy @krakensupport @krakenfx What actions have you taken to address this so far?

@geryzmad @krakensupport @krakenfx They scammed me too, deposit 1,5k. To Krak to pay bills, on hold no support can help, no emails they keep saying wait for. Fucked

48+ hours since my funds locked and no answer @krakensupport @krakenfx absolutely worst experience and Will never use it again

@geryzmad @krakensupport @krakenfx What actions have you taken to address this so far?

@Lightbring33r What actions have you taken to address this so far?

@Han_Akamatsu I joined and got scammed.

There are bots that subscribe as well, first time seeing that. Beware as I have no discord. This was left in one of my posts on the subscription section, don’t fall for these if we ever encounter such bots. Out of words.

@ReavisHele51635 What actions have you taken to address this so far?

You scammers out that are taking elderly people’s money should be caught and put in prison. I know someone that just lost her husband and you scammed her out of a lot of money God is going to punish people like you.

@Breauxbil What actions have you taken to address this so far?

@Byronplx @Chicago1Ray @elonmusk I have been scammed be careful and always check to see their country of origin. These scammers are professionals and very good at making your money disappear.

@elonmusk says X needs an algorithm overhaul..... what would you like say to Elon about this algorithm He's tagged... he'll see this, nows your chance

@Byronplx What actions have you taken to address this so far?

@Chicago1Ray @elonmusk I’m 70 years old. Still have a strong mind and body. But so many on X prey on me. Try to steal from me. I have a blue checkmark. I want to be able to automatically block anyone who doesn’t have a blue checkmark. 99% of them try and scam me. Crypto, lottery, sweepstakes, fans only

@VeronicaPh77921 I understand, has the police done anything possible about it?

@Resolve_core1 I have reported to local police On line recovery also a scam