Randal Nguyen

[Randal Nguyen @NguyenRand16695]

@224osk @secondfiapp @emurgo_io Appricate your suppport men 🙏. Yes I already open a ton of tickets, but most of them they just refuse to help my case or bot reply me and silent

[Randal Nguyen @NguyenRand16695]

SecondFi told affected users recovery required either the app OR seed phrase. I preserved my original phone/app as instructed. Now its tool accepts only seed, blocking recovery of all ADA +NIGHT. Why was app-based recovery promised, then removed? @secondfiapp @emurgo_io

[Just getting started @ShawnHuolihan]

@secondfiapp @emurgo_io @secondfi_jp why are tokens leaving the recovery funds wallet?! The recovery tool hasnt been released yet.. care to explain? @Cardano $ADA.

[Randal Nguyen @NguyenRand16695]

@224osk @secondfiapp @emurgo_io after i enter the password... then it disappear

[Randal Nguyen @NguyenRand16695]

@224osk @secondfiapp @emurgo_io

[Randal Nguyen @NguyenRand16695]

@224osk @secondfiapp @emurgo_io Thank you for replying me. No only new wallet able to see the seed phase. For old one it unable to display it.

[Randal Nguyen @NguyenRand16695]

@phil_uplc Hi @phil_uplc , could you please help review my case? I lost my seed phrase but still have the original SecondFi wallet accessible in the app. Support told me the app OR phrase would enable recovery, but the tool now accepts only the phrase. Is app-based ZK proof possible?

[Randal Nguyen @NguyenRand16695]

@leonardlee2410 @secondfiapp Have you send them a ticket, I sent, they just ignore me.....

[Randal Nguyen @NguyenRand16695]

1/3 My wallet was affected by the SecondFi security incident. I no longer have the recovery phrase, but the affected wallet remains fully accessible in the official app on my original phone. @secondfiapp

[Randal Nguyen @NguyenRand16695]

@secondfiapp @emurgo_io Please help!!!! $ADA midnight-3:native #Cardano #SecondFi #Yoroi !!!!!!!!!!!!!!!!!

[Randal Nguyen @NguyenRand16695]

@secondfiapp @emurgo_io Please help bring visibility to this unresolved case. @phillip_pon @IOHK_Charles — SecondFi explicitly told affected users that either the preserved app or seed phrase would support recovery. I kept the original app, but the launched tool now accepts only seed phrases, WHY?!!!!

[Randal Nguyen @NguyenRand16695]

@secondfiapp @emurgo_io This was not caused by me. I still had full access to my wallet through the original app and phone. My assets were compromised because of SecondFi’s security incident and faulty signing implementation. Not having a seed backup did not cause the theft. @secondfiapp @emurgo_io

[Randal Nguyen @NguyenRand16695]

@secondfiapp @emurgo_io 4/ I am not asking for recovery without proof. I’m asking @secondfiapp and @emurgo_io to keep my case open and investigate a secure app-based proof. This is a life-changing amount for my family. Please do not abandon users who followed your own instructions.

[Randal Nguyen @NguyenRand16695]

@secondfiapp @emurgo_io 3/ The leaked leaf key does not expose the master key, chain code or unused derivation paths. Why can’t the preserved app generate a ZK proof through an uncompromised child path? Is this truly impossible, or simply unsupported by the current tool?

[Randal Nguyen @NguyenRand16695]

@secondfiapp @emurgo_io 2/ Losing my seed phrase did not cause this loss. Before the incident, I still controlled my wallet through the original app and phone. My assets were compromised because of SecondFi’s faulty signing implementation—not because I had lost access to my wallet.

[Randal Nguyen @NguyenRand16695]

@secondfiapp @emurgo_io 1/ SecondFi’s FAQ explicitly stated: “Recovery needs either the app or the seed phrase.” Support also confirmed that keeping the affected wallet accessible in the official app should allow recovery without the phrase. I relied on that guidance and preserved everything.

[Randal Nguyen @NguyenRand16695]

Your official FAQ said recovery requires either the app OR the seed phrase. I still have the original app and access to my affected wallet, but no seed phrase. Support previously confirmed this should be sufficient—yet my ticket remains unanswered. @secondfiapp @emurgo_io

[SecondFi @secondfiapp]

SecondFi Incident Recovery: Asset Recovery Tool Update

Final security review and zero-knowledge ceremony complete. We expect to deploy the asset recovery tool next week.

In our last progress report, we outlined the remaining steps before the asset recovery tool could launch. Those steps are now complete, and we are preparing to deploy the tool next week.

Final security review concluded
The asset recovery tool's zero-knowledge proof audit, carried out by @zksecurityXYZ, was finalised on 9 September, and its smart contract audit on 11 September. The final external security review of the recovery system, which began on 14 September, has now concluded and all findings have been resolved. Audits and reviews reduce risk but do not guarantee the absence of vulnerabilities.

Zero-knowledge ceremony completed
Zero-knowledge ceremony completed. To generate the cryptographic parameters required to verify recovery proofs securely, we successfully completed the multi-party zero-knowledge ceremony. Independent contributors from multiple organizations generated, verified, and signed the final parameters to ensure the system's integrity before deployment.

What happens next
Subject to final checks, the asset recovery tool will be deployed next week. Full instructions on how to use it, together with the Recovery Terms that will govern its use, will be published through our official channels at launch.

Until then:
-If your wallet was affected by the incident, wait for the official launch announcement. Do not act on any tool or link that claims to recover your assets before then.
-Eligibility and the conditions for recovery will be set out in the Recovery Terms, and use of the tool will be subject to them.
-Recovery is limited to the assets available for recovery, and we cannot guarantee that every affected wallet will recover its full balance.
-If your wallet was not affected and you hold a balance, use the migration tool in the SecondFi app to move your assets to a new wallet.

Beware of impersonation attempts and scammers
Impersonators posing as EMURGO, Yoroi or SecondFi staff are multiplying fast, all trying to get hold of affected users' seed phrases.
Because of this, all SecondFi communication will come only from the official account, not from individual employees. The scale of these scams also means we must be extra vigilant in how we operate, including closing comments on our posts.

Security reminder
We anticipate an increase in fraud attempts around the launch. We will never initiate contact with you, ask you to send funds to any address, or charge a fee for recovery. Any message instructing you to transfer assets or share wallet information outside our official channels should be treated as fraudulent.

The asset recovery tool operates outside the official SecondFi app and will require you to enter your recovery phrase as part of the automated recovery process. The tool is designed so that your recovery phrase is processed only on your device and is not transmitted or stored.
The tool will only ever be available at https://t.co/d479Uh64Kx, which will be announced only through our official channels. Use the tool only on a device you trust and that is free of malware. Never provide it to a person, support representative, direct-message account, third-party website, or third-party application other than the asset recovery tool at that official address.

If you need support, submit a ticket at https://t.co/bKfl8SK9D2. @secondfiapp and @secondfi_jp remain the official channels for all updates.

[Randal Nguyen @NguyenRand16695]

@ShawnHuolihan @secondfiapp @Cardano I lost my seed phrase but still have full access to the wallet in the original app. SecondFi’s FAQ says recovery needs either the app or seed, but the new tool requires seed. What is the recovery path for users like me? @secondfiapp

[Randal Nguyen @NguyenRand16695]

@VertikalZero @adatrailblazer @secondfiapp @emurgo_io This is a real scam...

[Randal Nguyen @NguyenRand16695]

@secondfiapp

[Randal Nguyen @NguyenRand16695]

3/3 I relied on that guidance. Now SecondFi says its recovery tool WILL require the phrase, while my wallet has no “Back up recovery phrase” option. Please provide app-based signing or another ownership-verification process and confirm my recovery eligibility. @secondfiapp