Question 1

How much was stolen from SecondFi and how many wallets were hit?

Accepted Answer

Attackers took roughly 16.1 million ADA, about $2.4 million at the time, from 374 wallets, according to SecondFi, though SlowMist initially estimated losses could reach as high as $20 million.

Question 2

Why does SecondFi tell users not to restore their seed phrase in another wallet?

Accepted Answer

Because the vulnerability sits at the address level rather than in the app, importing a compromised recovery phrase elsewhere keeps the keys exposed, and signing any new transaction from an affected address could let attackers drain the funds again.

Question 3

Who is believed to be behind the SecondFi attack?

Accepted Answer

Groom Lake, the firm EMURGO hired to investigate, said the main attacker was sophisticated and well-funded, with some indicators pointing to North Korea's Lazarus Group, but no attribution has been confirmed.

SecondFi

SecondFi to shut down amid $2.4 million ADA exploit in June

One sharp brief.
Every day.

SecondFi

SecondFi to shut down amid $2.4 million ADA exploit in June

One sharp brief.Every day.

One sharp brief.
Every day.