SecondFi wallet breach leads to $2.4M loss, risk of $20M

A critical security breach at SecondFi, a prominent wallet service in the Cardano ecosystem, has resulted in confirmed losses of roughly 16 million ADA, valued at approximately $2.4 million, and prompted warnings of potentially far greater damage. The incident, which the company said it detected on June 23, originated from a flaw in the platform's native web-based wallet generation software, compromising the private keys of user wallets.

The company, which rebranded from the well-known Yoroi wallet in April 2026, immediately halted all services and placed its platform into maintenance mode. Preliminary on-chain analysis by SecondFi identified approximately 178 wallets as directly compromised. However, blockchain security firm SlowMist has projected significantly higher potential losses. In a public statement, SlowMist founder Cos said suspected hacker activity suggests total user losses could surpass $20 million, potentially involving up to 129 million ADA and other tokens.

The vulnerability fundamentally compromised the wallet generation process, meaning any wallet created through the affected software could be at direct risk, regardless of whether it has been exploited yet. In...