Digital Asset
Intelligence
Security Incident · Wallet

SecondFi Predictable Private Key Exploit: $2.40M Reported Loss

·Historical incident record

Incident Overview

SecondFi (formerly Yoroi) Cardano wallet suffered an exploit due to a vulnerability in its proprietary web wallet generation software, exposing private keys at the address level. Attackers drained ~16 million ADA ($2.4M) from 374 affected wallets across three attacks. The project secured ~129 million ADA (~$19.4M) through emergency rescue; affected users must wait for official recovery and are advised to use hardware wallets for migration.

Sources & References

Original incident referencehttps://x.com/secondfiapp/status/2071558652641870076 (opens in a new tab)

This record presents information attributed to the linked sources. Incident dates describe the original event, not a new report. Reported loss figures reflect the source record and are not current market valuations.

More Security Incidents

View All →
  1. Incident date
    Target

    Gitcoin

    Attack methodFront-end Attack
    Reported lossNot disclosed
  2. Incident date
    Attack methodPrivate Key Leakage
    Reported lossNot disclosed
  3. Incident date
    Attack methodOracle Misassignment
    Reported loss$ 73,400
  4. Incident date
    Target

    Bankrbot

    Attack methodAccount Compromise
    Reported loss$ 479,885
  5. Incident date
    Target

    Royal.io

    Attack methodSmart Contract Vulnerability
    Reported loss$ 263,000