A quantity of Cardano wallets have been drained of roughly 16 million ADA (value $2.4 million) after self-described “neofinance” platform SecondFi was hit by an exploit that focused its pockets era software program.
SecondFi first alerted its followers to the incident this morning on X, claiming that it had detected a safety problem that impacted a small quantity of Cardano wallets on its platform.
It mentioned that it had contained the problem and that, as a precaution, its companies could be briefly positioned into upkeep mode and that it might pause all front-end interactions.
Since then, SecondFi has shared an replace that claims to have recognized the basis trigger of the exploit as a difficulty involving its native Cardano internet pockets era software program.
It seems that some customers might not be made complete after the incident, as SecondFi notes that it’s “taken extraordinary steps to guard remaining property the place doable.”
🚨 SECURITY UPDATE: Root Trigger & Blast Radius Confirmed
We now have remoted the basis trigger of the current safety incident. The problem was confined to our native Cardano internet pockets era software program.
Our staff has accomplished an onchain evaluation to find out the scope of affect, and…
— SecondFi (@secondfiapp) June 23, 2026
The self-custody agency mentioned, “Our staff has accomplished an on-chain evaluation to find out the scope of affect, and we at the moment are finalizing an impartial technical evaluation with a number one blockchain safety agency to validate our findings.”
Software program developer Blink Labs has warned that the exploit means “the wallets generated are all unsafe,” and suggested customers to “change to a different pockets instantly.”
