Post
Parent event 01
X conversation update
1 related posts from @CG_BRC20
Related posts@CG_BRC20
Back to narratives
SecurityActive
Conversation intelligence
SecondFi (Yoroi) Security Incident: ~16M ADA Stolen
SecondFi, the Cardano wallet formerly known as Yoroi, suffered a security breach resulting in approximately 16 million ADA stolen due to a vulnerability in its native web wallet generation software. The Cardano blockchain itself was not compromised.
Heat
95
Confidence
95%
Evidence
8
Updated
Why It Happened
The root cause was in the wallet generation software that creates new wallets and recovery seed phrases, potentially exposing private keys from creation. The incident was isolated to the wallet software layer, not the Cardano chain.
Outcome So Far
SecondFi has isolated the root cause, put the wallet into maintenance mode, and is working to make affected users whole. Details on compensation and number of affected wallets are pending.
Actors
SecondFiSelf-custodial card. Spend anywhere Visa works.SecondFi is a neofinance platform on Cardano that suffered an exploit draining $2.4 million from wallets due to a vulnerability in its wallet generation software.
EMEMURGOBuilding the Cardano ecosystem.
EMURGO is a blockchain technology company that co-founded the Cardano protocol and develops solutions for the Cardano ecosystem.
Timeline order
Post
Post
Parent event 02
Initial reports of wallet draining
Users reported wallets being drained from Yoroi/SecondFi. The wallet was put into maintenance mode.
Related posts@Cardanians_io@Cardanians_io@jiaozibullish4 posts
Post