Question 1

SecondFi/Yoroi Wallet Migration FAQ

Accepted Answer

SecondFi/Yoroi Wallet Migration FAQ

Q: SecondFi/Yoroi Wallet Migration FAQ

<h1 id="secondfiyoroiwalletmigrationfaq">SecondFi/Yoroi Wallet Migration FAQ</h1> This guide explains how to move your assets out of SecondFi using the wallet migration tool, what happens during migration, and what to do afterwards. Please read it fully before you begin. <h2 id="thebasics">The basics</h2> <h3 id="whydoineedtomigratemywallet">Why do I need to migrate my wallet?</h3> Between June 21st and 23rd 2026, unauthorized transactions resulted in assets being removed from certain SecondFi user wallets. Following this event, and as previously announced, we made the difficult decision to wind down SecondFi and the Yoroi wallet. Because the wallet is closing down, you need to move all your assets out of SecondFi to the newly created Cardano wallet (provided by a third party of your choice) that you control, before it shuts down. After that, you may lose access permanently. The wallet migration tool is for all users who still have a remaining balance. Anyone holding assets in SecondFi needs to migrate whether or not their wallet was affected by the incident. If your assets were taken in the incident, the recovery is handled separately through the recovery tool rather than through the migration tool. You may be required to provide information, complete verification steps, or respond to further notices. The applicable recovery terms will apply. <h3 id="mywalletwasemptiedintheincidentdoistillneedtomigrate">My wallet was emptied in the incident. Do I still need to migrate?</h3> If your wallet holds no assets because it was emptied during the incident, there is nothing to migrate. Your path is the recovery process. If your wallet

Q: Incident FAQ

<ol> <li>What is the scope of the impact? Between June 21st and 23rd, SecondFi experienced a security incident that resulted in approximately 16.1 million ADA (~$2.6 million) being stolen from 374 wallets.</li> <li>What happened? An independent investigation EMURGO engaged Groom Lake, an independent forensic investigation / blockchain intelligence provider to assist with tracing and evidentiary analysis and they reviewed the incident using primary technical evidence, including code, code history, and public blockchain data.</li> </ol> What the investigation indicates to date: <ol> <li>Attack from an external actor: linked to high-volume addresses employing advanced tradecraft: <a href="https://x.com/0xGroomLake">@0xGroomLake</a> indicates that the primary operation behind the unauthorised transfers was sophisticated, external, and well-funded, with indicators consistent with activity by a professional, state-aligned threat actor. Certain indicators are being assessed for potential overlap with known DPRK-linked threat activity of Lazarus Group.</li> <li>Two separate attackers: Groom Lake also identified activity by a second party that appears, based on current evidence, to be separate from the primary operation and to have affected a different set of wallets during the same window. No overlap in affected wallets has been identified to date.</li> </ol> The root cause: A cryptographic flaw The root cause was a highly subtle flaw in how the wallet software generated per-transaction signatures. In si

This guide explains how to move your assets out of SecondFi using the wallet migration tool, what happens during migration, and what to do afterwards. Please read it fully before you begin.

The basics

Why do I need to migrate my wallet?

Between June 21st and 23rd 2026, unauthorized transactions resulted in assets being removed from certain SecondFi user wallets. Following this event, and as previously announced, we made the difficult decision to wind down SecondFi and the Yoroi wallet.

Because the wallet is closing down, you need to move all your assets out of SecondFi to the newly created Cardano wallet (provided by a third party of your choice) that you control, before it shuts down. After that, you may lose access permanently.

The wallet migration tool is for all users who still have a remaining balance. Anyone holding assets in SecondFi needs to migrate whether or not their wallet was affected by the incident.

If your assets were taken in the incident, the recovery is handled separately through the recovery tool rather than through the migration tool.

You may be required to provide information, complete verification steps, or respond to further notices. The applicable recovery terms will apply.

My wallet was emptied in the incident. Do I still need to migrate?

If your wallet holds no assets because it was emptied during the incident, there is nothing to migrate. Your path is the recovery process. If your wallet

Question 2

Incident FAQ

Accepted Answer

What is the scope of the impact? Between June 21st and 23rd, SecondFi experienced a security incident that resulted in approximately 16.1 million ADA (~$2.6 million) being stolen from 374 wallets.
What happened? An independent investigation EMURGO engaged Groom Lake, an independent forensic investigation / blockchain intelligence provider to assist with tracing and evidentiary analysis and they reviewed the incident using primary technical evidence, including code, code history, and public blockchain data.

What the investigation indicates to date:

Attack from an external actor: linked to high-volume addresses employing advanced tradecraft: @0xGroomLake indicates that the primary operation behind the unauthorised transfers was sophisticated, external, and well-funded, with indicators consistent with activity by a professional, state-aligned threat actor. Certain indicators are being assessed for potential overlap with known DPRK-linked threat activity of Lazarus Group.
Two separate attackers: Groom Lake also identified activity by a second party that appears, based on current evidence, to be separate from the primary operation and to have affected a different set of wallets during the same window. No overlap in affected wallets has been identified to date.

The root cause: A cryptographic flaw The root cause was a highly subtle flaw in how the wallet software generated per-transaction signatures. In si

Question 3

How to migrate your Cardano native assets using the wallet migration tool

Accepted Answer

How to migrate to a new Cardano wallet

SecondFi is ceasing operations. If you hold ADA or Cardano native assets in SecondFi, move them to a Cardano wallet you control.

The migration tool is inside the SecondFi app you already have installed.

Which applies to you:

Wallet not affected: use the migration tool now to move the assets you still hold.
Wallet affected in the incident: use the asset recovery tool available on secondfi.io. Migrating does not affect your asset recovery request or your eligibility for the recovery process.

Before you start:

Create a new Cardano wallet from a provider of your choice.
Have the destination address ready.
Use a hardware wallet if you can. A hardware wallet is recommended as an additional layer of security. It keeps your private keys offline.

Compare Cardano wallets by platform, features, and security: cardano.org/wallets

Important reminders:

You never need to add ADA to migrate. Migrating does not require topping up or funding your wallet at any point.
Migration happens inside the official SecondFi application you already have installed.
There is no separate migration application. There is no separate migration website.

**Read the instruct

Question 4

SecondFi is Ceasing Operations

Accepted Answer

SecondFi is ceasing operations

In light of the security incident that occurred between June 21st and 23rd, 2026, we have made the difficult decision to cease operations.

Because SecondFi is ceasing operations, you must move all your assets out of the platform to a newly created Cardano wallet (provided by a third party of your choice) that you control, before it shuts down. After that, you may permanently lose access. A hardware wallet is recommended as an additional layer of security. Here is a list of supported Cardano wallets: cardano.org/wallets/

Who Needs to Migrate?

We strongly recommend that all SecondFi users migrate all of their assets out of the SecondFi app, whether or not you were affected by the incident, because SecondFi is ceasing operations. We've launched a wallet migration tool which is intended for all SecondFi users who currently hold any remaining Cardano balance in their SecondFi wallet.

The migration tool, available within the official SecondFi app or browser extension, transfers your entire Cardano blockchain balance, including all ADA, native tokens, and NFTs, to the destination address of a newly created Cardano wallet from a provider of your choice.

The migration tool moves Cardano assets only; non-Cardano assets must be moved separately. We recommend following your new provider's official instructions and, where possible, creating a new multichain wallet that you control.

If your ADA is currently stak

Question 5

SecondFi Asset Recovery FAQ

Accepted Answer

The basics

What is the SecondFi recovery process?

The SecondFi recovery process is the official process for users whose wallets were affected by the June 2026 security incident. It allows you to verify control of an affected wallet, review any assets that are eligible for recovery, choose a new Cardano wallet you control as the destination, and submit a recovery request.

Recovery is separate from wallet migration:

Wallet migration moves supported assets that remain in a wallet to a new wallet.
Recovery concerns eligible assets affected by the security incident.

Do I need to have contacted support before I start?

No. You do not need to have contacted support or obtained any a prior reference number to start. Go directly to secondfi.io in a web browser and start the recovery process there. Submitting a recovery request through the official tool begins the recovery process for the affected wallet.

Where is the official recovery tool?

The official recovery tool is available only through secondfi.io.

For your safety:

Type secondfi.io directly into your browser rather than following a link from an email, advertisement, direct message, or search result.
Check that the address bar shows exactly secondfi.io before you begin.
Do not install a browser extension or download an application claiming to be required for recovery.
SecondFi will not contact you first to as

Question 6

SecondFi card programme will close on 30 November 2026

Accepted Answer

The SecondFi card programme will close on 30 November 2026. In agreement with Wirex, SecondFi has decided to cancel all cards following that date. This article explains what is changing, what cardholders should do before then, and how to get help.

What is changing

The SecondFi card programme closes on 30 November 2026.
In agreement with Wirex, SecondFi has decided to cancel all cards following that date. The SecondFi card is issued by Wirex pursuant to a license from Visa.
Once a card is cancelled, it can no longer be used to make payments.

What to do before 30 November 2026

We encourage all cardholders to spend any remaining balance before 30 November 2026. The card programme closes on that date, so please plan ahead: spend any funds you are holding on the card before 30 November 2026.

Transactions that are not supported

Certain transactions are not supported on the SecondFi card, including purchases at online stores that require 3DS authentication. 3D Secure (3DS) is an additional verification step that some online merchants use at checkout, usually by sending a one-time code or asking you to approve the payment in an app. Where an online store requires 3DS authentication for a purchase, that purchase cannot be completed with your SecondFi card. If a payment is declined for this reason, it is not a fault with your card or your account; the merchant simply requires an authentication step that the card does not support, so another payment method will be needed

Featured Articles

Browse All Categories