lace.io

Get the new #Cardano wallet from @InputOutputHK, and be more you. A world of new #Web3 experiences awaits you.

[lace.io @lace_io]

We're evolving the Lace Beta Program!

As we continue building new features for Lace, we're exploring ways to give the community more opportunities to get involved earlier through a refreshed, opt-in Beta Program.

The goal is simple: give interested users early access to upcoming features, gather feedback sooner, and help shape the new future of Lace together.

Carbon will be the first feature available through this new phase of the program.

Please answer poll below and add comments 👇

[lace.io @lace_io]

@SecureFundToken Sorry your question was where can you report ui issues, so I gave you the link to the support channel post.

Please seek support here:
Support Hub: https://t.co/FjJy8xopcB
Discord: https://t.co/8keAPUYm63
Live Chat: https://t.co/HrjAipq8Kr
FAQ's: https://t.co/6UMVH3PTiJ

[lace.io @lace_io]

We're evolving the Lace Beta Program!

As we continue building new features for Lace, we're exploring ways to give the community more opportunities to get involved earlier through a refreshed, opt-in Beta Program.

The goal is simple: give interested users early access to upcoming features, gather feedback sooner, and help shape the new future of Lace together.

Carbon will be the first feature available through this new phase of the program.

Please answer poll below and add comments 👇

[Input Output Group @IOGroup]

We have been made aware of reports of anomalous transactions involving the SecondFi app, an EMURGO product. @secondfiapp is best placed to speak to this.

Please refer to EMURGO's updates:

[lace.io @lace_io]

@SecureFundToken You click on the post and all will come up.

[lace.io @lace_io]

@0xbAlpha Currently the team are working on it with the 2.1 release! Won’t be long.

[lace.io @lace_io]

@BehzadNerwey Soon! Just waiting for iOS review to finalise

[lace.io @lace_io]

@SecureFundToken Here are our support channels to choose from:

[lace.io @lace_io]

Friendly reminder to stay safe and be aware of scams.

Any X account that is not this account is NOT us. Our engineers would never contact you on their personal accounts. X is also not the place for wallet support or troubleshooting. We have official support channels for that which I would refer you to.

If anyone asks you to send an email, share recovery phrases, passwords, or private information, that is NOT us.

These are the ONLY official support channels you should use if you need help with your account:

Support Hub: https://t.co/N2FNNdAA3W
Discord: https://t.co/QjknGdBHuY
WhatsApp Live Chat: https://t.co/QIL850Zq09
FAQs: https://t.co/mIc6VyL6QK

Anyone else should be reported and blocked immediately.

Please stay cautious and always double check before engaging with anyone claiming to represent Lace.

[lace.io @lace_io]

@binary_geek007 nearly there with internal testing 🙌

[lace.io @lace_io]

We've been teasing that something new is on the way.

This week, teams across IOG are putting it through its paces, testing a completely new opt-in Lace experience built on the foundations of Lace 2.0.

It's faster, more intuitive and designed to make everyday interactions feel more seamless from the moment you open your wallet.

We're not quite ready to show you everything just yet, but we thought it was time to give you a small glimpse of what's coming.

Take a look below👇

Soon 👀

[lace.io @lace_io]

@Longhouse_Bear https://t.co/oawe2MTHX9

[lace.io @lace_io]

We've been teasing that something new is on the way.

This week, teams across IOG are putting it through its paces, testing a completely new opt-in Lace experience built on the foundations of Lace 2.0.

It's faster, more intuitive and designed to make everyday interactions feel more seamless from the moment you open your wallet.

We're not quite ready to show you everything just yet, but we thought it was time to give you a small glimpse of what's coming.

Take a look below👇

Soon 👀

[lace.io @lace_io]

@J012d4n We understand and putting together a plan to share more on this soon!

[lace.io @lace_io]

@TheInvestronaut Coming shortly! Just waiting for the review to finalise.

[lace.io @lace_io]

Would you be interested in joining?

[lace.io @lace_io]

@KyosukeTakatuki No problem!

[lace.io @lace_io]

@KyosukeTakatuki Let me pass this onto the mobile team and I will get back to you!

[lace.io @lace_io]

@cryptofan222 Please also see here:

[SecondFi @secondfiapp]

Important Security Update.
As stated, we have identified the root cause of the incident. It is at the address level.

The affected software signer used a deterministic nonce derivation flaw. Every time an address signed a transaction, it leaked enough information to mathematically reconstruct that address's private key from public blockchain data alone.

If you were affected by the attack, your first/default address (index 0) is almost certainly exposed. It is the address that some wallets may be using by default or as the only address at all, and nearly always has transactions. That history is all an attacker needs.

Please DO NOT RESTORE your recovery phrase into another Cardano wallet. This does not mitigate the security risk.

Your keys are derived from your recovery phrase, not from the app. Restoring the same phrase into another wallet recreates identical addresses with identical exposure. The compromised thing is the key of the compromised address(es), not the interface you are using.

If you were affected by the attack, and use any of your compromised address(es) to deposit it could be drained again. This includes withdrawing staking rewards even using another wallet.

Reward withdrawal and delegation are signed with the stake credential. The withdrawn funds could be routed to your first/default address (as indicated above), which has a high chance of being compromised (wallets work differently managing it). Mempool-monitoring adversaries can front-run or sweep your assets on confirmation.

There has been conflicting advice from community members in an attempt to be helpful. Do nothing until official steps come from SecondFi.

We are working to facilitate the verification process so users can claim back their assets safely. Following the above is very important, if not it makes verified claims more difficult.

The only thing you should do right now is submit a ticket at https://t.co/bKfl8SK9D2

We will never DM you first or ask for your recovery phrase.

[lace.io @lace_io]

@cryptofan222 Hi, there has never been an option to reset a seed phrase. This is a one time thing when you set up hence why so important. If you want a new seed phrase you have to set up a new wallet. However you can reset a password. All info here: https://t.co/mvjybPFxiT
Hope this helps!

[lace.io @lace_io]

@FrugalGamerNet We have Carbon coming very soon, with internal testing now nearing completion. Please see the screenshots shared in our previous posts.

We believe this version is even better than the original Lace, and we're excited to get it into your hands.

Not long to go now!

[lace.io @lace_io]

@TheOnlyRook @BSCNews No this is specifically there wallet. Lace users have not been affected.

[lace.io @lace_io]

@CardanoNChill @secondfiapp @Ctrl_Wallet https://t.co/7RBRPiWYNv

[lace.io @lace_io]

@Al121212i @secondfiapp @Ctrl_Wallet You need to head to their portal and chat with with them directly. All details here:

[lace.io @lace_io]

We're aware of the incident reported by @secondfiapp and @Ctrl_Wallet and are monitoring the situation closely.

First and foremost, our thoughts are with the affected users. Security incidents impact real people, and we appreciate the transparency shown by the teams as they investigate and work toward resolution.

The safety and security of our users is at the heart of everything we do. We remain vigilant in our approach to security and continue to monitor the broader ecosystem as more information becomes available.

We encourage everyone to stay cautious and follow updates from official project channels.

We'll continue to keep a close eye on developments and share updates if there's anything relevant for Lace users.

[lace.io @lace_io]

@Al121212i @secondfiapp @Ctrl_Wallet You need to head to their portal and chat with with them directly. All details here:

[SecondFi @secondfiapp]

Self-custody puts you in control of your funds.
It also means the safety part is on you.

Worth running through the basics:

▪️ Your recovery phrase stays with you. Nobody needs it, including us. Anyone who asks for it is trying to drain you.

▪️ You approve every transaction yourself, so actually read it first. Wrong amount, or an address you don't recognize? Don't sign.

▪️ Onchain, there's no undo button. The few seconds you spend checking the address are the only protection you get.

Need help? One portal: https://t.co/C5s1yFPlq1. There is no support on X. Anyone in your replies or DMs offering to recover your funds is running a scam.