Cardano-based wallet provider SecondFi has announced it will wind down its operations, including its Yoroi wallet services, following a devastating cryptographic exploit that drained approximately 16.1 million ADA, worth an estimated $2.6 million.<\/p>\n
The security breach, which compromised 374 wallets, was first disclosed in late June. A subsequent independent forensic investigation by blockchain intelligence firm Groom Lake revealed that a highly sophisticated external threat actor was behind the attack. Preliminary findings point to potential links with the notorious North Korean state-sponsored hacking collective, the Lazarus Group, though definitive attribution remains unconfirmed.<\/p>\n
The Lazarus Group has long been a primary threat to the decentralized finance (DeFi) sector. According to reports by the Federal Bureau of Investigation<\/a>, the group has historically targeted cross-chain bridges, retail wallets, and smart contracts to fund state operations. Notable previous attacks attributed to the group include the Ronin Bridge heist and the Harmony Horizon bridge exploit, illustrating the scale of threat faced by emerging platforms.<\/p>\n The decision to shutter operations comes amid mounting user frustration over delayed asset recovery. SecondFi initially assured affected users on June 27 that a recovery path had been identified and would be initiated within two weeks. However, the platform has pushed the release of its recovery tools to August, leaving victims in limbo.<\/p>\n To facilitate the recovery process, SecondFi is developing a specialized tool utilizing zero-knowledge proofs<\/a> (ZKPs). This cryptographic method allows users to verify ownership of their compromised assets and claim them without exposing sensitive private keys or recovery phrases. The tool is currently undergoing third-party security audits to prevent further vulnerabilities.<\/p>\n Alongside the ZKP recovery tool, SecondFi plans to release a wallet export feature to allow users to migrate their remaining assets to alternative Cardano<\/a> wallets. However, the company has not committed to a direct reimbursement plan or indicated whether it will leverage its own treasury to compensate victims. This silence has compounded anxiety among users, many of whom were previously advised not to import their recovery phrases into other wallets during the active investigation.<\/p>\n