Question 1

Security Incident Update

Accepted Answer

For the latest updates, refer to our X accounts:

@secondfiapp @secondfi_jp

Asset Recovery Portal: secondfi.io

Please keep the following in mind

Do not share your recovery phrase with anyone. SecondFi team members will never ask for it.
Ignore unsolicited messages. We are seeing a surge in scammers and impersonators taking advantage of this situation. SecondFi will never DM you first.

How do I know if a message is really from SecondFi?

SecondFi team members will never:

Send you a direct message first on any platform
Ask for your seed phrase or recovery phrase
Ask you to transfer funds to any address

All official communications come through our verified accounts and support portal at secondfi.io.

Where can I get the latest updates?

Official X: x.com/secondfiapp ; x.com/secondfi_jp
Support portal: kb.secondfi.io/en/
Asset Recovery Tool: secondfi.io

Our team is working around the clock and we are committed to keeping our community informed throughout this process. Thank you for your patience.

Question 2

SecondFi/Yoroi Wallet Migration FAQ

Accepted Answer

SecondFi/Yoroi Wallet Migration FAQ

Q: SecondFi/Yoroi Wallet Migration FAQ

<h1 id="secondfiyoroiwalletmigrationfaq">SecondFi/Yoroi Wallet Migration FAQ</h1> This guide explains how to move your assets out of SecondFi using the wallet migration tool, what happens during migration, and what to do afterwards. Please read it fully before you begin. <h2 id="thebasics">The basics</h2> <h3 id="whydoineedtomigratemywallet">Why do I need to migrate my wallet?</h3> Between June 21st and 23rd 2026, unauthorized transactions resulted in assets being removed from certain SecondFi user wallets. Following this event, and as previously announced, we made the difficult decision to wind down SecondFi and the Yoroi wallet. Because the wallet is closing down, you need to move all your assets out of SecondFi to the newly created Cardano wallet (provided by a third party of your choice) that you control, before it shuts down. After that, you may lose access permanently. The wallet migration tool is for all users who still have a remaining balance. Anyone holding assets in SecondFi needs to migrate whether or not their wallet was affected by the incident. If your assets were taken in the incident, the recovery is handled separately through the recovery tool rather than through the migration tool. You may be required to provide information, complete verification steps, or respond to further notices. The applicable recovery terms will apply. <h3 id="mywalletwasemptiedintheincidentdoistillneedtomigrate">My wallet was emptied in the incident. Do I still need to migrate?</h3> If your wallet holds no assets because it was emptied during the incident, there is nothing to migrate. Your path is the recovery process. If your wallet

Q: Incident FAQ

<ol> <li>What is the scope of the impact? Between June 21st and 23rd, SecondFi experienced a security incident that resulted in approximately 16.1 million ADA (~$2.6 million) being stolen from 374 wallets.</li> <li>What happened? An independent investigation EMURGO engaged Groom Lake, an independent forensic investigation / blockchain intelligence provider to assist with tracing and evidentiary analysis and they reviewed the incident using primary technical evidence, including code, code history, and public blockchain data.</li> </ol> What the investigation indicates to date: <ol> <li>Attack from an external actor: linked to high-volume addresses employing advanced tradecraft: <a href="https://x.com/0xGroomLake">@0xGroomLake</a> indicates that the primary operation behind the unauthorised transfers was sophisticated, external, and well-funded, with indicators consistent with activity by a professional, state-aligned threat actor. Certain indicators are being assessed for potential overlap with known DPRK-linked threat activity of Lazarus Group.</li> <li>Two separate attackers: Groom Lake also identified activity by a second party that appears, based on current evidence, to be separate from the primary operation and to have affected a different set of wallets during the same window. No overlap in affected wallets has been identified to date.</li> </ol> The root cause: A cryptographic flaw The root cause was a highly subtle flaw in how the wallet software generated per-transaction signatures. In si

This guide explains how to move your assets out of SecondFi using the wallet migration tool, what happens during migration, and what to do afterwards. Please read it fully before you begin.

The basics

Why do I need to migrate my wallet?

Between June 21st and 23rd 2026, unauthorized transactions resulted in assets being removed from certain SecondFi user wallets. Following this event, and as previously announced, we made the difficult decision to wind down SecondFi and the Yoroi wallet.

Because the wallet is closing down, you need to move all your assets out of SecondFi to the newly created Cardano wallet (provided by a third party of your choice) that you control, before it shuts down. After that, you may lose access permanently.

The wallet migration tool is for all users who still have a remaining balance. Anyone holding assets in SecondFi needs to migrate whether or not their wallet was affected by the incident.

If your assets were taken in the incident, the recovery is handled separately through the recovery tool rather than through the migration tool.

You may be required to provide information, complete verification steps, or respond to further notices. The applicable recovery terms will apply.

My wallet was emptied in the incident. Do I still need to migrate?

If your wallet holds no assets because it was emptied during the incident, there is nothing to migrate. Your path is the recovery process. If your wallet

Question 3

Incident FAQ

Accepted Answer

What is the scope of the impact? Between June 21st and 23rd, SecondFi experienced a security incident that resulted in approximately 16.1 million ADA (~$2.6 million) being stolen from 374 wallets.
What happened? An independent investigation EMURGO engaged Groom Lake, an independent forensic investigation / blockchain intelligence provider to assist with tracing and evidentiary analysis and they reviewed the incident using primary technical evidence, including code, code history, and public blockchain data.

What the investigation indicates to date:

Attack from an external actor: linked to high-volume addresses employing advanced tradecraft: @0xGroomLake indicates that the primary operation behind the unauthorised transfers was sophisticated, external, and well-funded, with indicators consistent with activity by a professional, state-aligned threat actor. Certain indicators are being assessed for potential overlap with known DPRK-linked threat activity of Lazarus Group.
Two separate attackers: Groom Lake also identified activity by a second party that appears, based on current evidence, to be separate from the primary operation and to have affected a different set of wallets during the same window. No overlap in affected wallets has been identified to date.

The root cause: A cryptographic flaw The root cause was a highly subtle flaw in how the wallet software generated per-transaction signatures. In si

Question 4

How to migrate your Cardano native assets using the wallet migration tool

Accepted Answer

How to migrate to a new Cardano wallet

SecondFi is ceasing operations. If you hold ADA or Cardano native assets in SecondFi, move them to a Cardano wallet you control.

The migration tool is inside the SecondFi app you already have installed.

Which applies to you:

Wallet not affected: use the migration tool now to move the assets you still hold.
Wallet affected in the incident: use the asset recovery tool available on secondfi.io. Migrating does not affect your asset recovery request or your eligibility for the recovery process.

Before you start:

Create a new Cardano wallet from a provider of your choice.
Have the destination address ready.
Use a hardware wallet if you can. A hardware wallet is recommended as an additional layer of security. It keeps your private keys offline.

Compare Cardano wallets by platform, features, and security: cardano.org/wallets

Important reminders:

You never need to add ADA to migrate. Migrating does not require topping up or funding your wallet at any point.
Migration happens inside the official SecondFi application you already have installed.
There is no separate migration application. There is no separate migration website.

**Read the instruct

Question 5

SecondFi is Ceasing Operations

Accepted Answer

SecondFi is ceasing operations

In light of the security incident that occurred between June 21st and 23rd, 2026, we have made the difficult decision to cease operations.

Because SecondFi is ceasing operations, you must move all your assets out of the platform to a newly created Cardano wallet (provided by a third party of your choice) that you control, before it shuts down. After that, you may permanently lose access. A hardware wallet is recommended as an additional layer of security. Here is a list of supported Cardano wallets: cardano.org/wallets/

Who Needs to Migrate?

We strongly recommend that all SecondFi users migrate all of their assets out of the SecondFi app, whether or not you were affected by the incident, because SecondFi is ceasing operations. We've launched a wallet migration tool which is intended for all SecondFi users who currently hold any remaining Cardano balance in their SecondFi wallet.

The migration tool, available within the official SecondFi app or browser extension, transfers your entire Cardano blockchain balance, including all ADA, native tokens, and NFTs, to the destination address of a newly created Cardano wallet from a provider of your choice.

The migration tool moves Cardano assets only; non-Cardano assets must be moved separately. We recommend following your new provider's official instructions and, where possible, creating a new multichain wallet that you control.

If your ADA is currently stak

Question 6

Setting Up Biometric Authentication

Accepted Answer

Biometric authentication (Face ID or fingerprint) allows you to unlock your wallet and confirm transactions quickly and securely.

Go to Profile > Security.
Enable biometrics and follow your device's prompts to enrol your face or fingerprint.
Once enrolled, you can use biometrics to unlock the app and sign transactions instead of entering your PIN.

Featured & Frequently Read Articles

Browse All Categories