Cardano Ecological Wallet SecondFi confirmed that there was a loophole in its self-research wallet generation software, which enabled the attackers to transfer 16 million ADAs in three external attacks, involving 374 wallets, amounting to approximately US$ 2.4 million at the price in the text. The team indicated that patches for unaffected users were online and that affected users were required to submit their complaints directly to SecondFi.

The bug occurred on the address level

SecondFi states that the problem is not merely the leakage of assistive notes or the invasion of a single device, but rather the generation of links at the wallet address. The team stated that the risk would be triggered when the affected user signed the transaction, so that importing the assistive words into other wallets would not avoid the problem.

This means that some users may be exposed to the same risk even if they change their wallet client. On platform X, SecondFi reminded users not only that the relocation of assistive words came from line processing, but rather that claims should be submitted in the official process.

Team claims to have moved 129 million ADAs

Before the attackers made further contact with additional funds, SecondFi initiated emergency disposal and transferred an additional 129 million ADAs to independent third-party custodians. The team stated that an external accounting body had been engaged to verify this part of the asset and would proceed with subsequent recognition and processing accordingly.

  • Confirmed stolen: 16 million ADAs
  • Number of wallets involved: 374
  • Emergency transfer security: 129 million ADAs

Total loss or higher than recognized

SlowMist estimates that the total loss could exceed US$ 20 million if all the affected wallets and related tokens were to be counted together. However, this figure has not yet been confirmed by an independent audit.

Charles Hoskinson, the founder of Cardano, also responded to the incident. He stated that the amount of the loss was not particularly significant in terms of industry history, but that any asset loss was a real shock to the affected users.

Additional information:According to the report, the current price of ADA is about 0.15, which is low since 2020.