#What security issue occurred with SecondFi?
SecondFi, the wallet previously known as Yoroi, has faced a significant security breach that exposed users' private keys, leading to substantial cryptocurrency losses. Announced on June 23, the company suspended all operations and recommended that users transfer their assets immediately to secure wallets.
The security flaw originated in SecondFi's web wallet generation software. This vulnerability permitted unauthorized access to the private keys of multiple users. Initially, about 178 wallets were identified as compromised, resulting in confirmed losses of approximately 16 million ADA, equivalent to nearly $2.4 million, in addition to other tokens and NFTs.
However, the total potential losses could escalate beyond this preliminary assessment. Blockchain security firm SlowMist has warned that cumulative losses might exceed $20 million, potentially impacting up to 129 million ADA. This discrepancy indicates that many wallets could still be exposed, as not all affected wallets have presumably been drained yet.
To mitigate damage, SecondFi has halted all user transactions and entered maintenance mode. With over 1 million users, the platform has stressed that any wallet created with the flawed software remains at risk. Users are urged to act quickly and transfer their assets to new, secure wallets.
#What was the background of SecondFi?
Originally branded as Yoroi, SecondFi rebranded in April 2026. Yoroi was one of the leading light wallets within the Cardano ecosystem, developed by Emurgo, one of Cardano's founding entities. It provided ADA holders with a convenient alternative to running full nodes while emphasizing user self-custody.
Compounding the situation, security experts have raised alarms over a surge of scams targeting users affected by the breach. Fraudsters are posing as SecondFi customer support, offering fraudulent recovery tools and trying to solicit sensitive information from anxious users seeking help.
#What should Cardano investors do?
For those holding ADA, the essential course of action is straightforward: If you have ever utilized the SecondFi or Yoroi web wallet, generate new keys with a different wallet provider and transfer your assets as soon as possible.
A critical point of concern is the response from Emurgo, SecondFi’s parent organization and a foundational player in the Cardano ecosystem. Observing how they address this crisis and whether they extend financial support to those impacted will provide insights into the accountability of the Cardano infrastructure during challenging times.