Question 1

Security Incident Update

Accepted Answer

For the latest updates, refer to our X accounts:

@secondfiapp @secondfi_jp

⚠️ Important: Wait for Instructions before taking further actions

Independent actions taken outside of official guidance create additional risks, and may significantly complicate the asset claims process. Our team is working through a secure recovery process, and we will continue keeping users updated as progress is made. Official step-by-step instructions will follow shortly.

We will never DM you first or ask for your recovery phrase. If you receive such a message, it is a scam.

Please keep the following in mind

Do not share your recovery phrase with anyone. SecondFi team members will never ask for it.
Ignore unsolicited messages. We are seeing a surge in scammers and impersonators taking advantage of this situation. SecondFi will never DM you first.

How do I know if a message is really from SecondFi?

SecondFi team members will never:

Send you a direct message first on any platform
Ask for your seed phrase or recovery phrase
Ask you to transfer funds to any address

All official communications come through our verified accounts and support portal at secondfi.io.

Where can I get the latest updates?

Official X: x.com/secondfiapp ; x.com/secondfi_jp
Support portal: [secondf

Question 2

Incident FAQ

Accepted Answer

What is the scope of the impact? Between June 21st and 23rd, SecondFi experienced a security incident that resulted in approximately 16.1 million ADA (~$2.6 million) being stolen from 374 wallets.
What happened? An independent investigation EMURGO engaged Groom Lake, an independent forensic investigation / blockchain intelligence provider to assist with tracing and evidentiary analysis and they reviewed the incident using primary technical evidence, including code, code history, and public blockchain data.

What the investigation indicates to date:

Attack from an external actor: linked to high-volume addresses employing advanced tradecraft: @0xGroomLake indicates that the primary operation behind the unauthorised transfers was sophisticated, external, and well-funded, with indicators consistent with activity by a professional, state-aligned threat actor. Certain indicators are being assessed for potential overlap with known DPRK-linked threat activity of Lazarus Group.
Two separate attackers: Groom Lake also identified activity by a second party that appears, based on current evidence, to be separate from the primary operation and to have affected a different set of wallets during the same window. No overlap in affected wallets has been identified to date.

The root cause: A cryptographic flaw The root cause was a highly subtle flaw in how the wallet software generated per-transaction signatures. In

Question 3

SecondFi/Yoroi Wallet Migration FAQ

Accepted Answer

SecondFi/Yoroi Wallet Migration FAQ

Q: Incident FAQ

<ol> <li>What is the scope of the impact? Between June 21st and 23rd, SecondFi experienced a security incident that resulted in approximately 16.1 million ADA (~$2.6 million) being stolen from 374 wallets. </li> <li>What happened? An independent investigation EMURGO engaged Groom Lake, an independent forensic investigation / blockchain intelligence provider to assist with tracing and evidentiary analysis and they reviewed the incident using primary technical evidence, including code, code history, and public blockchain data.</li> </ol> What the investigation indicates to date: <ol> <li>Attack from an external actor: linked to high-volume addresses employing advanced tradecraft: <a href="https://x.com/0xGroomLake">@0xGroomLake</a> indicates that the primary operation behind the unauthorised transfers was sophisticated, external, and well-funded, with indicators consistent with activity by a professional, state-aligned threat actor. Certain indicators are being assessed for potential overlap with known DPRK-linked threat activity of Lazarus Group.</li> <li>Two separate attackers: Groom Lake also identified activity by a second party that appears, based on current evidence, to be separate from the primary operation and to have affected a different set of wallets during the same window. No overlap in affected wallets has been identified to date.</li> </ol> The root cause: A cryptographic flaw The root cause was a highly subtle flaw in how the wallet software generated per-transaction signatures. In

Q: SecondFi/Yoroi Wallet Migration FAQ

<h1 id="secondfiyoroiwalletmigrationfaq">SecondFi/Yoroi Wallet Migration FAQ</h1> This guide explains how to move your assets out of SecondFi using the wallet migration tool, what happens during migration, and what to do afterwards. Please read it fully before you begin. <h2 id="thebasics">The basics</h2> <h3 id="whydoineedtomigratemywallet">Why do I need to migrate my wallet?</h3> Between June 21st and 23rd 2026, unauthorized transactions resulted in assets being removed from certain SecondFi user wallets. Following this event, and as previously announced, we made the difficult decision to wind down SecondFi and the Yoroi wallet. Because the wallet is closing down, you need to move all your assets out of SecondFi to the newly created Cardano wallet (provided by a third party of your choice) that you control, before it shuts down. After that, you may lose access permanently. The wallet migration tool is for all users who still have a remaining balance. Anyone holding assets in SecondFi needs to migrate whether or not their wallet was affected by the incident. If your assets were taken in the incident, the recovery is handled separately through the recovery tool rather than through the migration tool. You may be required to provide information, complete verification steps, or respond to further notices. The applicable recovery terms will apply. <h3 id="mywalletwasemptiedintheincidentdoistillneedtomigrate">My wallet was emptied in the incident. Do I still need to migrate?</h3> If your wallet holds no assets because it was emptied during the incident, there is nothing to migrate. Your path is the recovery process. If your wallet

This guide explains how to move your assets out of SecondFi using the wallet migration tool, what happens during migration, and what to do afterwards. Please read it fully before you begin.

The basics

Why do I need to migrate my wallet?

Between June 21st and 23rd 2026, unauthorized transactions resulted in assets being removed from certain SecondFi user wallets. Following this event, and as previously announced, we made the difficult decision to wind down SecondFi and the Yoroi wallet.

Because the wallet is closing down, you need to move all your assets out of SecondFi to the newly created Cardano wallet (provided by a third party of your choice) that you control, before it shuts down. After that, you may lose access permanently.

The wallet migration tool is for all users who still have a remaining balance. Anyone holding assets in SecondFi needs to migrate whether or not their wallet was affected by the incident.

If your assets were taken in the incident, the recovery is handled separately through the recovery tool rather than through the migration tool.

You may be required to provide information, complete verification steps, or respond to further notices. The applicable recovery terms will apply.

My wallet was emptied in the incident. Do I still need to migrate?

If your wallet holds no assets because it was emptied during the incident, there is nothing to migrate. Your path is the recovery process. If your wallet

Question 4

How to migrate your Cardano native assets using the wallet migration tool

Accepted Answer

How to migrate to a new Cardano wallet

SecondFi is ceasing operations. If you hold ADA or Cardano native assets in SecondFi, move them to a Cardano wallet you control.

The migration tool is inside the SecondFi app you already have installed.

Which applies to you:

Wallet not affected: use the migration tool now to move the assets you still hold.
Wallet affected in the incident: wait for the asset recovery tool. Migrating does not affect your claim or your eligibility for the recovery process.

The asset recovery tool is launching in September. More details coming soon.

Before you start:

Create a new Cardano wallet from a provider of your choice.
Have the destination address ready.
Use a hardware wallet if you can. A hardware wallet is recommended as an additional layer of security. It keeps your private keys offline.

Compare Cardano wallets by platform, features, and security: cardano.org/wallets

Important reminders:

You never need to add ADA to migrate. Migrating does not require topping up or funding your wallet at any point.
Migration happens inside the official SecondFi application you already have installed.
There is no separate migration application. There is no separate

Question 5

SecondFi is Ceasing Operations

Accepted Answer

SecondFi is ceasing operations

In light of the security incident that occurred between June 21st and 23rd, 2026, we have made the difficult decision to cease operations.

Because SecondFi is ceasing operations, you must move all your assets out of the platform to a newly created Cardano wallet (provided by a third party of your choice) that you control, before it shuts down. After that, you may permanently lose access. A hardware wallet is recommended as an additional layer of security. Here is a list of supported Cardano wallets: cardano.org/wallets/

Who Needs to Migrate?

We strongly recommend that all SecondFi users migrate all of their assets out of the SecondFi app, whether or not you were affected by the incident, because SecondFi is ceasing operations. We've launched a wallet migration tool which is intended for all SecondFi users who currently hold any remaining Cardano balance in their SecondFi wallet.

The migration tool, available within the official SecondFi app or browser extension, transfers your entire Cardano blockchain balance, including all ADA, native tokens, and NFTs, to the destination address of a newly created Cardano wallet from a provider of your choice.

The migration tool moves Cardano assets only; non-Cardano assets must be moved separately. We recommend following your new provider's official instructions and, where possible, creating a new multichain wallet that you control.

If your ADA is currently stak

Question 6

How to Submit a Claim

Accepted Answer

How to Submit a Claim

Through the SecondFi app

You can submit a claim directly in the SecondFi app:

Tap the wallet status banner on your home screen (marked with a warning icon)
Click "Submit claim"
Enter your email address
Click "Submit claim"
Confirm it with the 6-digit verification code
Click "Done"

If you have already submitted a claim through support, there is no further action for you to take.

Through the support portal

Alternatively, if you don't have access to the SecondFi app, you can submit a claim through the support portal support.secondfi.io.

When submitting, please share the following:

Name
Contact email (if different to the one you used to log in)
Wallet address(es) (optional)

Featured Articles

Browse All Categories