ฐปกร คล้ายฉ่ำ

[ฐปกร คล้ายฉ่ำ @daddy9th]

Of course, I will abide by that announcement, and I will not send any private codes or code phrases to anyone who requests them.

[SecondFi @secondfiapp]

⚠️ Important Security Advisory: Scam Attempts

We have identified fraudulent messages circulating online from malicious actors attempting to impersonate SecondFi while our incident response remains underway.

Please note that NO recovery actions requiring user participation have begun at this time.

SecondFi will NEVER request private keys, seed phrases, wallet credentials, or direct wallet access under any circumstances.

Any communication instructing users to submit wallet information, migrate assets, or take immediate action outside of our verified official SecondFi channels should be considered fraudulent. NO user action is required at this stage.

You may submit a ticket through our official support channel at: https://t.co/bKfl8SK9D2

Our team is actively monitoring these malicious activities alongside our ongoing recovery progress, and we will continue sharing verified updates as progress continues.

[ฐปกร คล้ายฉ่ำ @daddy9th]

@ortamanos Ok

[ฐปกร คล้ายฉ่ำ @daddy9th]

Previously, you expressed regret to me that my account was stolen. You acknowledged it was my fault. However, you recently performed system maintenance and announced a vulnerability. Finally, you admitted there was a mistake. You should compensate me. #ada #secondfi

[ฐปกร คล้ายฉ่ำ @daddy9th]

@Omgkirby_DAO @Kryptotrace Who is he?

[ฐปกร คล้ายฉ่ำ @daddy9th]

@maxalexweber Thank you

[ฐปกร คล้ายฉ่ำ @daddy9th]

I was probably one of the first to submit the information, but it didn't speed things up at all. If they ask for proof, I can only say that I submitted everything. A little disappointed because I was hoping for faster results than they announced.

[SecondFi @secondfiapp]

🛡️ Recovery Process Update

Our team remains focused on returning assets to affected users, and we are making strong progress on a structured recovery and verification process.

Two important updates today:

1. The final balance snapshot has been taken today, Friday 26 June 2026. We have been capturing regular snapshots throughout the incident response, and this final one gives us an accurate, verified record of balances to work from as we prepare recovery.

2. Timing of recovery. Behind the scenes, our engineering and security teams have worked around the clock to validate balances and evaluate recovery mechanisms. This has led to a solution where assets can begin being returned, which we estimate is around two weeks away: roughly one week to reach a working solution, then a week of testing and review. Timing may shift as the work continues but our priority is clear: a safe return of funds and getting SecondFi back online responsibly.

We will resume operations once we are fully confident the platform is secure and all security reviews are complete and we are determined to get there as quickly as we safely can.

For now, the only action required is to submit a support ticket at: https://t.co/bKfl8SK9D2.

We appreciate your continued patience as we work through this process responsibly and will continue sharing updates as progress is made.

[ฐปกร คล้ายฉ่ำ @daddy9th]

@ilmcloughlin Yes

[ฐปกร คล้ายฉ่ำ @daddy9th]

@maxalexweber June 22,2026

[ฐปกร คล้ายฉ่ำ @daddy9th]

@Cardanians_io This is an app you support, isn't it?

[ฐปกร คล้ายฉ่ำ @daddy9th]

Now everyone understands. Everyone is waiting for clarification on when they will receive their refunds. I have already submitted all the evidence.

[SecondFi @secondfiapp]

⚠️ As stated, we have identified the root cause, it is at the address level. Please DO NOT RESTORE your recovery phrase into another Cardano wallet, this does not mitigate the security risk. The security risk occurs when an affected user signs a transaction.

In addition, we are working to facilitate the verification process so users can claim back their assets safely, following the above is very important, as it makes claims more difficult.

There has been conflicting advice from different community members in an attempt to be helpful. Do nothing until official steps come from SecondFi.

The only thing you should do is submit a ticket at https://t.co/bKfl8SK9D2.

We will never DM you first or ask for your recovery phrase.

[ฐปกร คล้ายฉ่ำ @daddy9th]

@_last_Ukrainian What did you say? All my assets have been transferred. I can't access them.

[ฐปกร คล้ายฉ่ำ @daddy9th]

I have hope when they say they will compensate and return assets to everyone who experienced problems.

[SecondFi @secondfiapp]

As per our previous post:
https://t.co/LGhovIoI3T

We have identified the root cause and have since rolled out a patch for all unaffected wallets. This will allow us to resume normal operations soon.

-----

Regarding affected wallets, 4 distinct draining events occurred. 3 were executed by external threat actors, resulting in a loss of ~16m ADA across 374 addresses.

To prevent total loss during the active exploit, emergency rescue measures were triggered to secure the available ~129m ADA and continues to be routed to an independent, qualified third-party custodian, where they are held securely for the benefit of the affected wallet addresses.

An external accounting firm has been engaged for a special audit to independently verify those holdings.

We are working to facilitate the verification process so users can claim back their assets safely. Affected users should submit their claim at https://t.co/bKfl8SK9D2

We take this incident seriously and are working to ensure all assets are returned to affected users as soon as possible.

As stated, we have identified the root cause, it is at the address level. Please DO NOT RESTORE your recovery phrase into another Cardano wallet, this does not mitigate the security risk. The security risk occurs when an affected user signs a transaction.

Further explanation to follow.

[ฐปกร คล้ายฉ่ำ @daddy9th]

I believe that if they take responsibility for every wallet lost in this incident, it would reflect commendable accountability and become a standard for the future, and we are eagerly awaiting that.

[SecondFi @secondfiapp]

We aim to provide the latest update on our investigation into the exploit

As mentioned in our previous post, between June 21–23, 2026, a sophisticated, automated attack drained funds from multiple Cardano wallets. We now have identified and isolated the addresses of 2 attackers.

We are sharing them below with the community, for full transparency.

Attacker A (Waves 1 & 2)
Drained 171 wallets across two automated batches.

• Collection Wallet 1:
addr1q9j7f598x988unr4zhjulft205jqnn9ewgwkhes5smf2sr6jsw98nm4qq38jw9epe587twavuhuhj5d8r92rjvmyjlzs9lqc3x
• Collection Wallet 2:
addr1q9wudkfeelzwev427yvapkmqexmet8q4vl303m7a4eerwtvt6rq00zyuqzeuw759vgqtdky0gyxnqx27n8q4k6h79yhsqelma8
• Collection Wallet 3:
addr1q82jlp2u0ezv2hsf6f40fkrv49hd72yv442nmrr5qeultpqamepaykp3m564hnd4zp75wxxds2j6d3ywvc8prhf2kcxqn6nql3
• Central Fee/Change Address:
addr1q8acx4h5a38x6ekpsp0x7aelw6mflt78khmz8lz75rtnqvn07w88zx2e89tgzqr3x0mecngqlg87kq9surhk48hj79mqcezfa8
• Attacker Stake Key:
Stake1u9hl8rn3r9vnj45pqpcn8auuf5q05rltqzcwpmm2nme0zasf40ymg

Attacker B (Wave 3)
Drained 203 wallets in a separate automated sweep.

• Collection Wallet (⚠️ 4,020,468 ADA linked to the exploit remains in this address, which has been flagged and is under active monitoring and investigation):
•addr1q8m5wdncq7rwum73r5cyyr82qx2xjem5k4ehapl3wy36aaerj829vasl3amtcwshgvnn6a25dr850tfw6qaj420d2szsslkku6
• Attacker Stake Key:
stake1uy3er4zkwc0c7a4u8gt5xfeaw42x3n6845hdqwe248k4gpgdq4da5

[ฐปกร คล้ายฉ่ำ @daddy9th]

Please stay tuned. I have sent the evidence to their team.

[SecondFi @secondfiapp]

To provide more clarity, we have identified the nature of the incident, it is at the address level. The security risk affects wallet users when a transaction is signed.

Therefore recovery to another platform or wallet does not mitigate the risk.

🚨 DO NOT restore your recovery phrase into a new Cardano wallet.

We have isolated the affected wallets and will post mitigation steps shortly.

[ฐปกร คล้ายฉ่ำ @daddy9th]

We are still awaiting a response and hope they will sincerely rectify the situation. Everything must be compensated before trust can be restored.

[SecondFi @secondfiapp]

🚨 SECURITY UPDATE: Root Cause & Blast Radius Confirmed

We have isolated the root cause of the recent security incident. The issue was confined to our native Cardano web wallet generation software.

Our team has completed an onchain analysis to determine the scope of impact, and we are now finalizing an independent technical review with a leading blockchain security firm to validate our findings.

[ฐปกร คล้ายฉ่ำ @daddy9th]

@bigpey That figure is unlikely to be just 16 million.

[ฐปกร คล้ายฉ่ำ @daddy9th]

@TheRefreshCNFT @Anyone_here54 I was probably one of the first to report this to them, but their response was one of regret, saying I must have saved the codes on my machine, allowing the hackers to steal all my coins. I denied the accusation. Hours later, they finally admitted that the vulnerability existed.

[ฐปกร คล้ายฉ่ำ @daddy9th]

Follow me to the very end. Follow me, and let's see what I get in return. I won't accept it if everything is kept quiet and they pretend nothing happened.

[Charles Hoskinson @IOHK_Charles]

SecondFi https://t.co/PVh4CILTHW

[ฐปกร คล้ายฉ่ำ @daddy9th]

@Emurgo_Ken You want others to understand, but you also need to understand those who have lost everything in their wallets. And I'm one of them. I may not have had much money left, but I really didn't want to lose it. What would you do?

[ฐปกร คล้ายฉ่ำ @daddy9th]

If I hadn't posted that picture, it would have been my own fault for not taking better care of my bag. Some people called me stupid, some called me careless, but you know what? That's not true at all. It was an app error, and they've already admitted it.

[SecondFi @secondfiapp]

🚨 SECURITY UPDATE: Root Cause & Blast Radius Confirmed

We have isolated the root cause of the recent security incident. The issue was confined to our native Cardano web wallet generation software.

Our team has completed an onchain analysis to determine the scope of impact, and we are now finalizing an independent technical review with a leading blockchain security firm to validate our findings.

[ฐปกร คล้ายฉ่ำ @daddy9th]

@secondfiapp I'm waiting for your response. I hope you'll fully compensate me for all the damages I've suffered. You need to prove you were responsible for what happened. How long will that take? Almost 48 hours have passed, and I haven't slept at all.