SecondFi ADA Exploit: Private-Key Factory Bug Leads to $16M Loss, $129M Recovered via White Hat

The vulnerability existed in the wallet's address generation logic (private-key factory), exploited when users signed transactions. Attackers compromised at least 374 addresses, with 3 external threat actors executing the drain.

16M ADA lost to external threat actors; ~129M ADA secured via white hat intervention; SecondFi rolled out patch for unaffected wallets; affected users instructed to submit tickets for recovery.