Cardano (ADA) experienced no significant price disruption following a $2.4 million exploit on the SecondFi platform, where attackers stole 16.1 million ADA from 374 wallets. The breach stemmed from a flaw in the wallet’s transaction-signing software, but the Cardano network itself was not compromised. SecondFi is winding down, patching the vulnerability and securing 129 million ADA before further losses. Derivatives data showed open interest near $206.3 million and positive funding rates, indicating traders held positions without a bearish reaction. A possible link to North Korea’s Lazarus Group remains unconfirmed.
SecondFi is winding down after attackers stole 16.1 million ADA—worth approximately $2.4 million—from 374 wallets. The breach originated from a vulnerability in the wallet’s transaction-signing software, which allowed attackers to derive private key material from signing data.
The Cardano network was not breached, and hardware wallet users were unaffected. As the team stated, “given the gravity of this event and as previously announced, we have made the difficult decision to wind down SecondFi and Yoroi wallet.”
SecondFi patched the flaw and secured 129 million ADA before attackers could reach it, but operations will not return to normal. Wallet export tools are planned for early August, followed by a zero-knowledge recovery portal later that month. Blockchain intelligence firm Groom Lake found signs that may point to North Korea’s Lazarus Group, though no link has been confirmed. A separate attacker also targeted other wallets during the same period.
ADA traded near $0.17 at press time, with no notable sell-off following the news. The token was at $0.1725 on the daily chart, down slightly after pulling back from a July rise near $0.19. The RSI indicated a balanced pace with a modest positive tilt. Aggregate derivatives open interest rose above $210 million before settling near $206.3 million. The average funding rate showed that long traders remained willing to pay to keep positions open, signaling no rush to reduce leveraged exposure after the exploit.
The incident remains isolated to SecondFi, but it underscores the need for continued security reviews across the wider Cardano wallet ecosystem.
