A security incident at SecondFi has compromised user DeFi positions across multiple protocols including Minswap Farming, Liqwid, and SundaeSwap Farming. This event is part of a broader trend of cross-chain bridge and infrastructure exploits that have led to record losses in 2026.
The SecondFi incident appears to be a targeted exploit affecting users' positions in various DeFi protocols. The broader context includes a Q2 2026 record of $755M lost to DeFi exploits, with cross-chain bridge vulnerabilities being a primary attack vector.
SecondFi users are being advised to contact a specific individual for assistance and to ignore unsolicited support. The protocol's pools have been temporarily suspended.
SecondFiSelf-custodial card. Spend anywhere Visa works.SecondFi is a neofinance platform on Cardano that suffered an exploit draining $2.4 million from wallets due to a vulnerability in its wallet generation software.
MinswapThe best liquidity provider on CardanoMinswap is a community-centric DEX, in that $MIN tokens are fairly distributed, without any private or VC investment. Minswap has pioneered several ideas in the Cardano ecosystem such as the FISO model (touted as the fairest ISO model in the Cardano community) or a focus on Protocol Owned Liquidity. Tags: DeFi DEX Ecosystem(): Cardano Founded:
Liqwid is a decentralized, non-custodial liquidity protocol built on the Cardano blockchain, enabling users to lend and borrow digital assets.
SundaeSwapFirst native AMM DEX on CardanoSundaeSwap is a decentralized exchange protocol for the Cardano Network, enabling native token and ADA exchanges for anyone. With its protocol, you will be able to swap, stake, lend, borrow, and more in a truly decentralized way!
StrikeDecentralized lending and borrowing on Ethereum.Strike enables users and developers to supply digital assets onto the platform to earn from dyanmic rates provided by the protocol and use that supplied asset as collateral to borrow other supported digital assets all on-chain.
A DeFi protocol (Summerfi) was hacked for $6 million through flash credit manipulation and smart contract vulnerabilities. The attacker inflated asset volume, withdrew $70.9 million, and netted $6 million in DAI. Pools were temporarily suspended.