Cardano-based wallet SecondFi will shut down after a security breach resulted in the theft of approximately $2.6 million worth of ADA. Affected users are still awaiting recovery tools, now expected in August.
The shutdown of SecondFi highlights ongoing security vulnerabilities in cryptocurrency wallets and the potential for significant financial losses for users. The delay in recovery tools and the potential link to a state-sponsored hacking group underscore the risks associated with digital asset management.
Cardano-based wallet service SecondFi is set to wind down operations after a significant security breach led to the theft of approximately $2.6 million worth of ADA. The platform disclosed that attackers stole 16.1 million ADA due to a cryptographic flaw in its wallet software, affecting 374 user wallets.
An independent investigation by blockchain intelligence provider Groom Lake identified a sophisticated external actor, with indicators potentially pointing towards North Korea's Lazarus Group, though no definitive attribution has been made. This revelation comes nearly a month after SecondFi first reported the exploit in late June.
SecondFi is developing a recovery tool utilizing zero-knowledge proofs, which is currently undergoing testing and is slated for a third-party audit before a planned release in August. Additionally, the platform is preparing wallet export functionality to enable users to transfer their assets to alternative services. However, no direct reimbursement plan has been announced.
The extended timeline for recovery has caused frustration among affected users, many of whom were initially led to believe their funds could be recovered within two weeks. The company had previously advised users against restoring recovery phrases into new wallets while the investigation was ongoing.