Cardano Wallet Crisis: Users Lose 16M ADA in Attack

SecondFi Wallet Flaw Exposes Private Keys

The attack primarily targeted wallets where private keys were compromised due to a vulnerability in SecondFi, formerly known as Yoroi Wallet. SecondFi discovered the issue, noting that the flaw affected private key generation, leading to compromised addresses. The hacker sweeps funds from affected wallets only after users sign recent transactions.

Founding Entity Behind Compromised Wallet

SecondFi was developed by Emurgo Labs, a founding entity of the Cardano blockchain. This direct link to a core Cardano developer raises significant concerns about the ecosystem’s foundational security. The migration from Yoroi Wallet to SecondFi was completed on June 12, just days before the attack became public on June 24, 2026.

Users Urged to Move Funds Immediately

The SecondFi team has advised users against restoring their compromised seeds on other wallets, as the funds would remain at risk. They clarified that the security risk exists at the address level, activating when a transaction is signed. Therefore, users must move their funds quickly to a different type of wallet, preferably a hardware wallet if available. SecondFi has temporarily paused its frontend and urged users to remove the app and any associated extensions.

ADA Price Dips Amid Broader Concerns

Following the exploit, ADA, Cardano’s native token, saw a 2.9% drop in value within 24 hours, falling to $0.15. This pushed ADA out of the top 20 cryptocurrencies. The token has already lost over 54% of its value since the start of 2026, dropping from $0.42. Cardano has previously faced doubts regarding its future, with some projects reportedly abandoning the platform.

Treasury Compensation Under Consideration

On-chain researchers have tracked the attacker’s wallet, noting it was initially funded from a Binance account, which could potentially aid in tracing the individual. The Cardano treasury currently holds 352.4 million ADA. There are suggestions that these funds could be used to compensate affected wallet holders for their losses.