The Cardano Eco-project SecondFi found that there were serious loopholes in the process of generating their wallets, and that part of the private key used to create the ADA wallet was thus exposed, allowing the attackers to enter the relevant accounts. Following the incident, the platform was suspended and put on maintenance status.
Approximately 16 million ADAs have been confirmed losses
The chain investigation has traced multiple outflows of funds from affected accounts and identified multiple attacks-related addresses. According to the current disclosure, approximately 16 million ADAs have been identified for loss, amounting to approximately $2.4 million by calibre.
However, further research suggests that the actual risk may be greater than ADA. The total loss of this exposure could have been as high as 129 million ADAs at one time.
The impact continues to expand.
The earlier survey had identified approximately 178 affected wallets, but SecondFi subsequently indicated that the risk was not confined to the wallet of the assets that had been transferred. The threat may be triggered as long as the relevant user continues to sign the transaction using the affected address.
This means that the problem is not just one-time theft of assets, but that the affected address itself is no longer safe. For the security team, it also changed the focus of the incident, requiring an extension from the stolen account to all wallets generated through this method.
Platform Trust Pressure
SecondFi states that the team has isolated the associated risks during disposal and completed a full snapshot of the affected wallets for subsequent verification of assets. However, community confidence in the platform has declined significantly as losses have increased.
Some users have publicly questioned the project ' s response, arguing that it is difficult to restore market confidence to the information published by the platform. Criticism about transparency in communication is also increasing, indicating that the impact of the incident has gone from asset loss to the reputational level of the Platform.