Hardware Wallet Migration Guide
We have published a step-by-step guide to help users securely move their assets to a new hardware wallet, the most secure option for self-custody.
Before you start, keep these in mind:
- If you already use a hardware wallet, no action is required. Hardware wallet users were not affected by this incident.
- Do not delete the SecondFi app, and keep your seed phrase safe. Either one will be required to claim your assets through the recovery process.
- Stop using your existing wallet. Do not send, receive, sign, or stake from it.
The full step-by-step guide, including how to test with a small amount before moving your balance, is available here: https://t.co/B3RrzI83hx
Important Security Reminder
SecondFi will NEVER request private keys, seed phrases, wallet credentials, or request asset transfers under any circumstances. We will never DM you first.
Any message instructing you to move assets or submit wallet information outside of our verified official channels should be treated as fraudulent. Our official channels are @secondfiapp, @secondfi_jp, and https://t.co/bKfl8SK9D2.
For support, please submit a ticket only through our official support channel at: https://t.co/bKfl8SK9D2
Please be vigilant. This is a scam.
SecondFi has NOT released a desktop app or any downloadable recovery software. Do not download anything claiming to be SecondFi. Do not "reclaim" assets through any app or link sent by email.
Important Security Reminder:
SecondFi will NEVER request private keys, seed phrases, wallet credentials, or request asset transfers under any circumstances.
These are the ONLY OFFICIAL SecondFi channels:
▪️ X accounts @secondfiapp and @secondfi_jp
▪️ Support portal: https://t.co/bKfl8SK9D2
We will never DM you first. Any message instructing you to move assets or submit wallet information outside of our verified official channels should be treated as fraudulent.
⚠️ IMPORTANT SECURITY REMINDER
These are the ONLY OFFICIAL SecondFi channels:
▪️ X accounts @secondfiapp and @secondfi_jp
▪️ Support portal: https://t.co/bKfl8SJBNu
We will never DM you first or ask for your recovery phrase.
Any other account is a scam account.
If you come across a fake account or suspicious message, please report it to X. The screenshots below show known impersonator accounts to watch for.
Stay alert, and only trust updates from our official channels.
⚠️ Important Security Update
We are seeing an increase in malicious activity and impersonation attempts related to the recent incident.
As a precaution, please DO NOT deposit any additional funds into your existing SecondFi wallet until further notice.
To help users safely navigate next steps, we will be releasing:
1. A suitable mechanism to allow users to check whether their wallet has been affected by early next week.
2. A secure process that will allow users to safely move assets out of the platform thereafter thereafter.
Please remember that NO recovery actions require user participation have begun at this stage. Wallets should remain untouched until official recovery instructions are provided.
SecondFi will NEVER request private keys, seed phrases, wallet credentials, or request asset transfers under any circumstances.
For support, please submit a ticket only through our official support channel at: https://t.co/bKfl8SK9D2
Thank you to everyone for your continued patience and trust as this work continues.
🛡️ Recovery Process Update
Our team remains focused on returning assets to affected users, and we are making strong progress on a structured recovery and verification process.
Two important updates today:
1. The final balance snapshot has been taken today, Friday 26 June 2026. We have been capturing regular snapshots throughout the incident response, and this final one gives us an accurate, verified record of balances to work from as we prepare recovery.
2. Timing of recovery. Behind the scenes, our engineering and security teams have worked around the clock to validate balances and evaluate recovery mechanisms. This has led to a solution where assets can begin being returned, which we estimate is around two weeks away: roughly one week to reach a working solution, then a week of testing and review. Timing may shift as the work continues but our priority is clear: a safe return of funds and getting SecondFi back online responsibly.
We will resume operations once we are fully confident the platform is secure and all security reviews are complete and we are determined to get there as quickly as we safely can.
For now, the only action required is to submit a support ticket at: https://t.co/bKfl8SK9D2.
We appreciate your continued patience as we work through this process responsibly and will continue sharing updates as progress is made.
📢 Important Guidance for SecondFi Users
We understand that many users are considering migrating to new wallets, and that trusted members of the Cardano community are suggesting ways to do so. We recognise this comes from a desire to protect your assets. If you choose to migrate, you do so at your own risk.
However, we strongly advise against taking this action at this time. Particularly if you are not technical, the safest course is to leave it untouched.
Independent actions taken outside of official guidance create additional risks, and may significantly complicate the asset claims process. Our team is working through a secure recovery process, and we will continue keeping users updated as progress is made. Official step by step instructions will follow shortly.
If you have a query, you may submit a ticket at: https://t.co/bKfl8SK9D2. We will never DM you first or ask for your recovery phrase.
Thank you for your patience.
⚠️ As stated, we have identified the root cause, it is at the address level. Please DO NOT RESTORE your recovery phrase into another Cardano wallet, this does not mitigate the security risk. The security risk occurs when an affected user signs a transaction.
In addition, we are working to facilitate the verification process so users can claim back their assets safely, following the above is very important, as it makes claims more difficult.
There has been conflicting advice from different community members in an attempt to be helpful. Do nothing until official steps come from SecondFi.
The only thing you should do is submit a ticket at https://t.co/bKfl8SK9D2.
We will never DM you first or ask for your recovery phrase.
We aim to provide the latest update on our investigation into the exploit
As mentioned in our previous post, between June 21–23, 2026, a sophisticated, automated attack drained funds from multiple Cardano wallets. We now have identified and isolated the addresses of 2 attackers.
We are sharing them below with the community, for full transparency.
Attacker A (Waves 1 & 2)
Drained 171 wallets across two automated batches.
• Collection Wallet 1:
addr1q9j7f598x988unr4zhjulft205jqnn9ewgwkhes5smf2sr6jsw98nm4qq38jw9epe587twavuhuhj5d8r92rjvmyjlzs9lqc3x
• Collection Wallet 2:
addr1q9wudkfeelzwev427yvapkmqexmet8q4vl303m7a4eerwtvt6rq00zyuqzeuw759vgqtdky0gyxnqx27n8q4k6h79yhsqelma8
• Collection Wallet 3:
addr1q82jlp2u0ezv2hsf6f40fkrv49hd72yv442nmrr5qeultpqamepaykp3m564hnd4zp75wxxds2j6d3ywvc8prhf2kcxqn6nql3
• Central Fee/Change Address:
addr1q8acx4h5a38x6ekpsp0x7aelw6mflt78khmz8lz75rtnqvn07w88zx2e89tgzqr3x0mecngqlg87kq9surhk48hj79mqcezfa8
• Attacker Stake Key:
Stake1u9hl8rn3r9vnj45pqpcn8auuf5q05rltqzcwpmm2nme0zasf40ymg
Attacker B (Wave 3)
Drained 203 wallets in a separate automated sweep.
• Collection Wallet (⚠️ 4,020,468 ADA linked to the exploit remains in this address, which has been flagged and is under active monitoring and investigation):
•addr1q8m5wdncq7rwum73r5cyyr82qx2xjem5k4ehapl3wy36aaerj829vasl3amtcwshgvnn6a25dr850tfw6qaj420d2szsslkku6
• Attacker Stake Key:
stake1uy3er4zkwc0c7a4u8gt5xfeaw42x3n6845hdqwe248k4gpgdq4da5
Our commitment to supporting affected users remains unchanged. We are continuing to work alongside law enforcement agencies and key partners across the Cardano ecosystem to trace and restrict the movement of assets linked to the attack.
As investigations continue, we are actively reviewing all relevant intelligence related to the attack and the individuals responsible. Credible information relevant to the incident can be directed to
[email protected]
We will continue providing transparent updates until every necessary step has been completed.
The next crypto breakout list is here. 🚨
💰 XRP
💰 BNB
💰 TRON
💰 Cardano
🐸 $LILPEPE
Mix of stability + high-upside plays for 2026 🔥
https://t.co/hnUpfsQ4z5
Un evento muy motivacional, dirigido especialmente a las mujeres que estudian criminalística en la U de Medellín, invitaron a mujeres ejemplo de emancipación femenina y resiliencia en un área compleja de trabajo, en un principio dominada por varones pero cada vez más femenina.
Participaremos en el conversatorio: ´´Mujeres en las Ciencias Forenses´´ en la Universidad de Medellín;
Adriana Ibarra, la directora de nuestro laboratorio, será ponente.
Allí se hablará del papel de la mujer en en el ámbito de la investigación criminal, la criminalística, las ciencias forenses y la seguridad.
Agradecemos tan importante invitación.
¡LAS MUJERES PODEMOS DESEMPEÑAR EL ROL QUE QUERAMOS EN LA CIENCIA!