SecondFi || Support 💬

SecondFi is a self-custody neofinance platform built for spending, trading, earning, and saving with you in control.

[nate 💳 @nateacton]

SecondFi will not resume normal operations, even once the audits are complete.

Going forward, our involvement in @secondfiapp is limited to a dedicated asset recovery team, tasked solely with returning assets to affected users.

This is where our full focus and resources are directed.

[SecondFi @secondfiapp]

Your Options for Securing Assets, and What’s Next

We recognize that some users may not have completed all steps in the Hardware Wallet Guidance posted in our knowledge base. If you are not technically proficient, we recommend waiting for the secure wallet export functionality, which is currently intended to launch next week.

Here is an update on upcoming options:
• This week: Quarantine mode
We will enable quarantine mode, which will let users check whether a wallet address appears in preliminary incident-related data and submit a support ticket with the relevant wallet address.

• Next week: Secure wallet export functionality
We intend to deploy secure wallet export as the next phase of quarantine mode. This is intended to provide a safer way for users of varying experience levels to move assets to a new wallet.

• On potential asset recovery
As stated previously, we intend to support a process relating to potential asset recovery for users whose wallets are confirmed through the applicable process. Any such process remains subject to further investigation, verification, eligibility criteria, applicable terms and conditions, and technical implementation.

It is currently expected to involve a recovery tool using zero-knowledge proofs, initiated by users through a portal, designed to help users remain in control of the process while protecting their information.

Again, if you are not technically proficient, we recommend waiting for these options to go live. For now, you may submit a ticket at https://t.co/bKfl8SK9D2.

We will continue sharing updates as progress is made.

[EMURGO @emurgo_io]

Today, we formally notified the entities that we will be stepping down from our duties as a member of the Pentad. We want to thank the members for their shared commitment to Cardano throughout our time working alongside them.

Our immediate priority is the @secondfiapp recovery process, and we are concentrating our resources where they are needed most. We believe this is the right decision for our users and for the ecosystem, and it reflects the standard of accountability we hold ourselves to as a founding entity of Cardano.

As stated by SecondFi, quarantine mode is being enabled this week, letting users check if a wallet address appears in preliminary incident data and submit a support ticket. Our intention is that next week, the secure wallet export will be deployed to help affected users safely move assets to a new wallet. On asset recovery, we continue to make progress with the recovery tool, initiated through a portal, that keeps users in control while protecting their information

[SecondFi @secondfiapp]

SecondFi / Yoroi Wallet Guidance Sessions in Tokyo and Osaka

We are hosting dedicated in-person guidance sessions during for SecondFi and Yoroi Wallet users affected by the security incident.

Each session will include:
- A SecondFi / Yoroi update from our CEO
- A live Q&A with our specialists
- Migration guidance slides

Our team will answer your questions and walk you through best practices for securing your wallet, or safely migrating it using the secure wallet export functionality, which will be released soon.

Please note the guidance slides are informative only. We will not conduct 1:1 or hands-on wallet troubleshooting.

EVENT DETAILS:

📍 Tokyo: Melody Line Hall, 1F, WebX Venue
(The Prince Park Tower Tokyo, Minato City)
📅 Tuesday, 14 July 2026, 12:00 to 18:45 JST
Register here: https://t.co/wUwmLIEZbi

📍 Osaka: TKP Garden City Umeda Osaka
📅 Saturday, 18 July 2026, 12:00 to 17:45 JST
Register here: https://t.co/tpTZ5ZuHHY

Sessions are held in English and Japanese. Registration via Luma is required for both, and support is first-come, first-served.

[SecondFi @secondfiapp]

Security Alert: Fake SecondFi Extensions and Apps

We've seen scammers create fake SecondFi browser extensions and apps. Please read this before you install anything or click any link claiming to be from us. There is no new application or link, it is the same.

Do not accept links from anyone, including people claiming to be SecondFi team members, support, or partners. We will not DM or email you links to download software, sign a transaction, or take any action with your assets. If you receive a message like that, it's a scam. Do not click it.

The only official SecondFi extension is "searchable" in the Chrome Web Store. If you see any other extension using the SecondFi name or branding, it's fake.

Check for the verified blue checkmark. Our official extension listing carries a blue verified check, shown in the screenshots below. If the listing you're looking at doesn't have it, do not install it.

Scammers can and do clone extensions and apps to steal funds. When in doubt, go directly to https://t.co/C5s1yFPlq1 and verify links yourself rather than trusting anything sent to you.

Please check carefully that you are using the correct application

[SecondFi @secondfiapp]

⚠️ SecondFi Is Currently in Quarantine Mode

SecondFi is running in quarantine mode. It's the same application, but transactions are disabled. You can view your balance and wallet address only, you cannot send, swap, or move funds.

A screenshot is below so you know what to expect.

Please protect yourself from scams. Only download SecondFi from our official link: https://t.co/hkFtUebtxo

Do not accept download links from anyone else, including emails, messages claiming to be from SecondFi.

Chrome extension is live, app store is pending store approval.

[SecondFi @secondfiapp]

Quarantine Mode Is now live across Chrome extension, iOS, and Android.

What you need to do:
- If your SecondFi app is still in maintenance mode and not quarantine mode, you are on an older version. Please update your existing app to the latest version through your app store if it has not updated automatically.

IMPORTANT: This is the same app. Do not download a new or separate app.

What quarantine mode means:
- It's the same application, with transactions disabled
- You can view your balance and wallet address only
- You cannot send, swap, or move funds

Please protect yourself from scams.
Only download SecondFi from our official link: https://t.co/vmEn757KfC

Do not accept download links from anyone else, including emails, messages claiming to be from SecondFi.

[SecondFi @secondfiapp]

⚠️ Security Alert: FAKE RECOVERY EMAIL

A phishing email claiming to be from SecondFi is being sent to users. Please see the example below.

The email tells you to enter “Quarantine Mode” and sign a Service Agreement to recover your assets, and warns that you will lose them if you do not. This is false. There is no such agreement, and there is no recovery step that requires you to sign anything.

The only action we ask of you right now is submitting a support ticket. If any message asks you to do more than check your wallet and submit a ticket, it is a scam.

SecondFi will never request your recovery phrase, private keys, or wallet credentials, and we will never DM or email you first. Do not click the link in that email, and do not sign or approve anything it leads to.

Only trust our official channels:

▪️X accounts: @secondfiapp and @secondfi_jp
▪️Support portal: https://t.co/bKfl8SK9D2
▪️Wallet status: check in the SecondFi app, or use https://t.co/EGLOj6iKDl if you cannot access the app

[SecondFi @secondfiapp]

An update regarding the recent security incident involving SecondFi

What happened to SecondFi
Between June 21st and 23rd, SecondFi experienced a security incident that resulted in approximately 16.1 million ADA (~$2.6 million) being stolen from 374 wallets. We want to provide users with a transparent update based on the information currently available.

An independent investigation
EMURGO engaged Groom Lake, an independent forensic investigation / blockchain intelligence provider to assist with tracing and evidentiary analysis and they reviewed the incident using primary technical evidence, including code, code history, and public blockchain data.

What the investigation indicates to date:
1. Attack from an external actor: linked to high-volume addresses employing advanced tradecraft: @0xGroomLake indicates that the primary operation behind the unauthorised transfers was sophisticated, external, and well-funded, with indicators consistent with activity by a professional, state-aligned threat actor. Certain indicators are being assessed for potential overlap with known DPRK-linked threat activity of Lazarus Group.
2. Two separate attackers: Groom Lake also identified activity by a second party that appears, based on current evidence, to be separate from the primary operation and to have affected a different set of wallets during the same window. No overlap in affected wallets has been identified to date.

The root cause: A cryptographic flaw
The root cause was a highly subtle flaw in how the wallet software generated per-transaction signatures. In simplified terms, a value that should have been derived from secret information could, under certain conditions, be computed from public transaction data. This could enable affected private key material to be derived from information visible on the public blockchain.

This cryptographic flaw was also visible in a copy of the relevant code that had been published without authorisation to a public GitHub repository. We are continuing to assess the circumstances surrounding the publication and are cooperating with the relevant authorities.

Fix and winding down of SecondFi
The flaw has been patched, and new wallets created with the corrected software are not known to be affected by this issue. However, given the gravity of this event and as previously announced, we have made the difficult decision to wind down SecondFi and Yoroi wallet.

Asset recovery and safe migration
Our current priority is supporting affected users, assisting recovery efforts, and enabling users to move assets securely.

1. Recovery tool: A secure recovery tool using zero-knowledge (ZK) proofs is being developed. The portal is designed to allow users to initiate the process directly while limiting the information required to do so. The tool is currently in testing, and we are engaging a specialist third-party auditor to review it before its anticipated release in August 2026.

2. Safe migration: In the meantime, we are preparing wallet export functionality designed to allow users to migrate their assets to a wallet of their choice. We anticipate releasing this by early August 2026.

Please follow our official channels for further updates.

Important Security Reminder

SecondFi will NEVER request private keys, recovery phrases, or wallet credentials, and we will never DM you first. Do not trust any checker, link, or account outside our official channels:
▪️ X accounts: @secondfiapp and @secondfi_jp
▪️ Support portal: https://t.co/bKfl8SK9D2

[SecondFi @secondfiapp]

How to check if your SecondFi / Yoroi Wallet was affected and submit a support ticket

Step 1: With quarantine mode now live, you can view your balance and check whether your wallet address was affected in the recent incident.

If your wallets are potentially impacted, a warning banner will appear on your Home screen in the SecondFi app. Tap it to view your wallet status.

Please note that statuses are based on preliminary, non-final data from our review of the incident and remain subject to further review.

[PayAI Network | x402 Facilitator @PayAINetwork]

@Tapestry_AI @OptimOracle @relayaisolana @osgiliath_ai @cromafun @Quick_Sync @LilFatFrank @dexfra_ai @WURKDOTFUN Amazing Space today.
We had a great time hearing what you all have built and what you've got coming next!
🚨 See you on the next one!
If you missed it, here's the recording 👇
https://t.co/IZSDOOcExs

[SecondFi || Support 💬 @SecondFi_AID]

@theFlashCash Been riding with Flash for the last 3 years, posts every bet slip, shares a ton of info, completely transparent and is on another historic run! The work he puts in speaks for itself! Keep killing it 🔥🔥

[SecondFi || Support 💬 @SecondFi_AID]

@JesusWearsGucci 😂😂😂

[SecondFi || Support 💬 @SecondFi_AID]

@DeployingUnits @imNewEnglandBoi I was gonna say last week was huge! Up 56 units strictly tailing Nate only and I missed the big day Monday!

[SecondFi || Support 💬 @SecondFi_AID]

@setsarahtostun I’ve done both and they both work great!

[SecondFi || Support 💬 @SecondFi_AID]

@EliBlade @PatMcAfeeShow Let’s goooooo

[SecondFi || Support 💬 @SecondFi_AID]

@EliBlade Jesus 😳😳

[SecondFi || Support 💬 @SecondFi_AID]

@StatsBySTATS @MLBRandomStats @jacobsantille

[SecondFi || Support 💬 @SecondFi_AID]

PurpleStride 2021: Travis Brush Pancreatic Cancer Action Network https://t.co/oG7ujlXSfc

[SecondFi || Support 💬 @SecondFi_AID]

@HammerDAHN #fanduelhammerdahnrollover1250
WVA-3.5(-115)
Baylor -6(-110)
Arkansas +2 (-110)
Oral Roberts +9 (-105)
Rutgers +7.5 (-115)
Villanova -6 (-110)
OK St -6 (-110)
Wisc/Baylor O136.5(-115)
Arkansas/Ttech O140 (-110)
Tampa bay lightning O6 (-120)