Cardano wallet SecondFi hit by $2.4 million exploit, up to $20 million in user funds at risk

Cardano wallet SecondFi hit by $2.4 million exploit, up to $20 million in user funds at risk

Finance

SecondFi loses $2.4 million in Cardano wallet exploit

SecondFi was hit by three separate attacks exploiting a flaw in its wallet generation software. A further 129 million ADA was secured by the team before attackers could reach it.

By

Oliver Knight

|

Edited by

Cheyenne Ligon

Jun 24, 2026, 3:45 p.m.

1

min read

Make

preferred on

Share

Share this article

Copy link

X icon

X (Twitter)

LinkedIn

Facebook

Email

Make

preferred on

SecondFi suffers exploit (Clint Patterson/Unsplash)

Summary

Show

SecondFi confirmed three external attacks drained 16 million ADA ($2.4 million) from 374 wallets via a flaw in its proprietary wallet generation software; a patch has been rolled out for unaffected users.

The team rescued a further 129 million ADA before attackers could reach it, routing funds to a third-party custodian — but blockchain security firm SlowMist estimates total losses could still exceed $20 million pending an independent audit.

Users cannot protect themselves by moving their seed phrase to another wallet; the vulnerability activates at the address level when a transaction is signed, and affected users must submit claims directly to SecondFi.

SecondFi, the Cardano wallet formerly known as Yoroi, says it has patched a major exploit that drained roughly 16 million ADA, worth approximately $2.4 million, from 374 user wallets across three separate attacks.

The root cause was a flaw in SecondFi's proprietary wallet generation software. The vulnerability sits at the address level, meaning simply moving a seed phrase to another wallet offers no protection. "The security risk occurs when an affected user signs a transaction," the

team said on X.

Before attackers could reach a further 129 million ADA, SecondFi said it triggered emergency rescue measures, routing the funds to an independent third-party custodian. An external accounting firm has been engaged to verify those holdings and affected users can submit claims to SecondFi.

Blockchain security firm SlowMist estimates total losses could exceed $20 million when accounting for the full range of compromised wallets and tokens, a figure that remains unconfirmed pending an independent audit.

Cardano founder Charles Hoskinson acknowledged the incident but noted the dollar amount was modest relative to other crypto hacks, though he stressed that offered little consolation to those affected. "It hurts them whenever they lose anything," he said. "This is the unfortunate reality of crypto."

ADA is currently trading around $0.15, its lowest level since 2020.

Hack

Latest Crypto News

1

Asset management giant Invesco files for tokenized fund targeting stablecoin reserve market

6 hours ago

2

Coinbase's Base blockchain resumes after two-hour outage disrupted network

8 hours ago

3

Strategy's yield-generating STRC stock is more correlated with BTC than ever

9 hours ago

4

Kraken in talks to buy 15% stake in DeFi lender Aave at $385 million valuation

9 hours ago

5

a16z-backed crypto firm rebrands, shifts focus to solving AI’s global copyright headache

10 hours ago

6

BlackBerry is making a massive comeback as an 'uncrashable' software layer for AI and robotics

11 hours ago

7

Strategy has a 10-month cash runway for dividends, but retail investors are losing faith

11 hours ago

8

Quant fund says bitcoin is near a major inflection point as rare onchain signals align

11 hours ago

9

Bitcoin tumbles to new multi-year low of $58,000, but a short-squeeze setup emerges

12 hours ago

10

Crypto for Advisors: Bitcoin: planning for inheritance

12 hours ago

Latest Research

CEX Volumes Drop to Lowest Since September 2024 as RWA Perps Hit Record High

CEX Volumes Drop to Lowest Since September 2024 as RWA Perps Hit Record High

In May, combined exchange volumes fell 3.45% to $4.41T; the lowest since September 2024. RWA perpetual futures volumes rose 10.4% against the trend, hitting a new all-time high.

By

CoinDesk Research

Jun 15, 2026

In May, combined exchange volumes fell 3.45% to $4.41T; the lowest since September 2024. RWA perpetual futures volumes rose 10.4% against the trend, hitting a new all-time high.

Why it matters

:

In May, combined exchange volumes fell 3.45% to $4.41T; the lowest since September 2024. RWA perpetual futures volumes rose 10.4% against the trend, hitting a new all-time high.

View Full Report

More From

Finance

Asset management giant Invesco files for tokenized fund targeting stablecoin reserve market

Kraken in talks to buy 15% stake in DeFi lender Aave at $385 million valuation

a16z-backed crypto firm rebrands, shifts focus to solving AI’s global copyright headache

CD20

$1,570.23

CD20 down 4.06 percent

4.06%

BTC

$58,810.83

BTC down 3.28 percent

3.28%

ETH

$1,529.88

ETH down 5.39 percent

5.39%

XRP

$1.02

XRP down 4.88 percent

4.88%

SOL

$66.75

SOL down 1.25 percent

1.25%