SecondFi lost approximately 16 million ADA across 374 addresses, affected users can submit compensation claims

Cardano wallet service provider SecondFi stated that it has identified the root cause of the recent security incident and has deployed patches for the unaffected wallets, and will soon resume normal operations. SecondFi disclosed that there were a total of 4 incidents of funds being transferred out, of which 3 were carried out by external attackers, resulting in approximately 16 million ADA being transferred from 374 addresses. To reduce further losses during the ongoing attacks, SecondFi initiated an emergency transfer, moving approximately 129 million ADA to an independent third-party custodian for safekeeping, and has hired an external accounting firm for a special audit to facilitate subsequent verification and return assets to the affected addresses. SecondFi advises affected users to submit claims through the official support page and currently not to import their mnemonic phrases into other Cardano wallets, as the security risk occurs at the address and signature level.