Post
SecondFi wallet enters maintenance mode
Paul CW reports that after reports of wallet drains, SecondFi has put its wallet into maintenance mode after identifying a security issue.
SecondFi, the rebranded Yoroi wallet, suffered a critical vulnerability that exposed private keys during web wallet creation, leading to theft of ~16 million ADA ($2.4M) plus tokens and NFTs from 178 wallets. The incident also triggered a ~13% drop in Yoroi DRep voting power over 8 epochs as ~90 million ADA was withdrawn by stakers.
A flaw in SecondFi's web wallet creation allowed attackers to obtain private keys and drain self-custody wallets. The governance impact reflects users losing trust in the Yoroi DRep, which represents the largest voting power on Cardano.
SecondFi entered maintenance mode, took a balance snapshot, and plans to compensate users. Yoroi DRep voting power has fallen by ~13%. No arrests or fund recovery reported yet.
SecondFiSelf-custodial card. Spend anywhere Visa works.SecondFi is a neofinance platform on Cardano that suffered an exploit draining $2.4 million from wallets due to a vulnerability in its wallet generation software.
CardanoPeer-reviewed blockchain for secure dAppsCardano is a blockchain platform built on academic research that enables smart contracts and decentralized applications while using significantly less energy than traditional cryptocurrencies like Bitcoin. What sets Cardano apart is its methodical, research-driven approach — every major feature is peer-reviewed by scientists and cryptographers before being added to the network. This careful process aims to create a more secure and stable foundation compared to platforms that prioritize speed over thorough testing. The platform's native cryptocurrency, ADA, is used to send money, pay transaction fees, and participate in network governance. Cardano uses a proof-of-stake system to process transactions, which works differently from Bitcoin's mining approach. Instead of competing to solve complex puzzles, users can "stake" their ADA — essentially locking it up temporarily — to become validators who verify transactions. The system selects validators based on how much ADA they've staked and for how long, then rewards them with additional ADA for their participation. This approach uses far less energy than traditional mining while keeping the network secure. The platform also features a two-layer design that separates basic payment transactions from smart contract operations, allowing each function to be optimized independently for better performance. ADA holders can earn staking rewards by locking up their tokens to help secure the network, vote on proposed changes to the platform, and use ADA for international money transfers with lower fees than traditional services. Cardano was founded in 2017 by Charles Hoskinson, who previously helped create Ethereum. Hoskinson leads Input Output Global (IOG), the technology company that builds and maintains Cardano's core software. The ecosystem operates through three organizations: IOG handles technical development, the Cardano Foundation promotes adoption and standardization, and Emurgo helps businesses integrate blockchain t
Paul CW reports that after reports of wallet drains, SecondFi has put its wallet into maintenance mode after identifying a security issue.
Crypto Banter reports a critical flaw in SecondFi (rebranded Yoroi) exposed private keys during web wallet creation; ~178 wallets drained of ~16M ADA plus tokens and NFTs. SecondFi enters maintenance mode, takes snapshot, and plans compensation.
1 related posts from @C__Herridge
Rodrigo Pacini criticises Yoroi for not stepping down as DRep after the wallet vulnerability put users at risk, calling it a governance failure that should embarrass the Cardano ecosystem.
1 related posts from @SlowMist_Team
Adatainment reports that the Yoroi Wallet DRep, one of the largest on Cardano, has seen its voting power drop ~13% over 8 epochs since the exploit, with ~90 million ADA withdrawn by stakers.