Bitget App
Trade smarter
Buy cryptoMarketsTradeFuturesStocksEarnInstitutionAI & More
Cardano wallet exploit: SecondFi traces attack to private key flaw, warns users not to restore seed phrases

Cardano wallet exploit: SecondFi traces attack to private key flaw, warns users not to restore seed phrases

AMBCryptoAMBCrypto2026/06/25 16:18
By:AMBCrypto

SecondFi has identified the root cause of the recent exploit that targeted hundreds of Cardano wallets. It warned affected users not to restore their recovery phrases into another wallet, as the compromise occurs at the private key level rather than the wallet application itself.

In an investigation update published on

June 2
5, the Cardano wallet provider said the attack stemmed from
a deterministic nonce derivation flaw in its software signer
. This allowed attackers to mathematically reconstruct private keys from publicly available blockchain data after affected addresses signed transactions.

The findings come days after the exploit drained approximately

16 million ADA
, worth about
$2.4 million
. It affected
374 wallets across four separate wallet-draining events
.

@media only screen and (min-width: 0px) and (min-height: 0px) { div[id^="bsa-zone_1774359638628-7_123456"] { min-height: 50px; transition: min-height 0.3s ease; } } @media only screen and (min-width: 640px) and (min-height: 0px) { div[id^="bsa-zone_1774359638628-7_123456"] { min-height: 90px; } }
AD

SecondFi says signing flaw exposed private keys

According to SecondFi, the vulnerability existed at the address level. This means compromised keys remain exposed even if users import the same recovery phrase into another Cardano wallet.

The company said every transaction signed by an affected address leaked sufficient information for attackers to derive that address’s private key from on-chain data.

As a result, SecondFi urged affected users not to migrate their recovery phrases to another wallet or attempt to move funds independently. It warned that compromised addresses could be drained again. 

It also cautioned against withdrawing staking rewards, as such transactions could expose funds to attackers monitoring the mempool.

Instead, the wallet provider advised affected users to wait for its official recovery process while submitting claims through its support portal.

Recovery effort enters next phase

SecondFi said it has completed mapping all wallets affected during the initial exploit and has begun the next stage of its recovery program.

The company confirmed that

374 wallet addresses
were impacted, with approximately 1
6 million ADA
compromised. It added that emergency containment efforts have already secured around
129 million ADA
, which is being held pending recovery operations.

SecondFi has also established a dedicated restoration fund to reimburse affected users and engaged multiple external security firms to audit its systems before resuming normal operations.

The platform remains in maintenance mode while independent security reviews continue.

Investigators identify two attacker groups

As part of its latest update, SecondFi said it had identified and isolated the blockchain addresses associated with two attackers responsible for the automated wallet-draining campaigns between

June 21 and 23
.

According to the investigation, one attacker drained

171 wallets
across two waves. At the same time, a second actor compromised
203 wallets
during a separate sweep.

The company also disclosed that approximately

4.02 million ADA
linked to the exploit remains in one identified collection wallet. The wallet has been flagged and remains under active monitoring.

Final Summary

  • SecondFi traced the Cardano wallet exploit to a deterministic nonce-derivation flaw that enabled attackers to reconstruct private keys from public blockchain data.
  • The company has launched a recovery program, identified two attacker groups, and warned affected users not to restore compromised recovery phrases into other wallets.

 

0
0

Disclaimer: The content of this article solely reflects the author's opinion and does not represent the platform in any capacity. This article is not intended to serve as a reference for making investment decisions.

Understand the market, then trade.
Bitget offers one-stop trading for cryptocurrencies, stocks, and gold.
Trade now!

You may also like

Updated Version 4 - Mattel Investor Ariel Urges Sale Amid Stalled Turnaround

Ariel Investments holds a 5.4% stake in Mattel and believes the stock remains severely undervalued. Mattel stated it will take into account the opinions of Ariel and other shareholders. According to sources, Authentic Brands Group approached Mattel last week, with a potential valuation of around $6 billion. Analyst comments and a chart were added in paragraph 10. Juveria Tabassum/Angela Christy M Reuters, October 5 – A letter obtained by Reuters shows that a major shareholder of Mattel (MAT.O) on Monday urged the Barbie-maker to explore a sale, citing stagnant growth in performance and profitability. Ariel Investments, holding a 5.4% stake in Mattel, stated that the company’s stock is still severely undervalued. “We believe that strategic buyers would be willing to acquire your company at a price significantly above the current share price,” Ariel Co-CEO John Rogers wrote in a letter to Mattel’s board. The asset management firm suggested Mattel's options include “divesting significant assets, mergers, and/or an outright sale of the company.” Ariel believes other toy companies may be interested in Mattel’s asset portfolio, as well as entertainment firms and traditional private equity companies. In recent years, despite Mattel’s stabilizing business and the box-office success of the Barbie movie, the company has faced fluctuating sales and rising input costs. Operating profit has declined for six consecutive quarters. In after-hours trading, Mattel's shares rose 0.9% to $16.20. Ariel’s initiative comes as Mattel undergoes leadership changes (link). CEO Ynon Kreiz stepped down last month to become Co-CEO of Paramount Skydance (PSKY.O), while board member Roger Lynch—former editor-in-chief of Vogue and head of Condé Nast, parent company of The New Yorker—will assume the CEO role next month. Mattel replied to Reuters by email: “Our board and management team are committed to acting in the best interests of all shareholders, and will consider the views expressed in the letter from Ariel Investments, as well as those of other Mattel shareholders.” This is the second time this year investors have asked Mattel to consider strategic options. In May, Mattel investor Southeastern Asset Management called for the company to explore various options (link), including privatization, acquisition by competitor Hasbro (HAS.O), or by a major media company that could value Mattel’s assets more fairly than the public market. Last week, a person familiar with the matter told Reuters that Authentic Brands Group (AUTH.N) approached Mattel about a potential acquisition (link), which could value the toymaker at about $6 billion or higher. The source noted that there is no guarantee Mattel will accept Authentic Brands’ proposal, and the company is not conducting a formal sale process at this time. Following the news, Mattel’s share price soared. Despite the rebound, the stock remains down about 20% year-to-date. According to London Stock Exchange Group (LSEG) data, Mattel’s 12-month forward price-to-earnings ratio stands at 9.99, compared to an industry average of 14.03. “I think this just reflects the market’s frustration about the business possibly being a bit stagnant. Given the current level of valuation, now may be a good time to turn around the business away from the spotlight of investors,” said Morningstar analyst Jaime Katz. (For the convenience of non-English speakers, Reuters automatically translates its reports into several languages. As automated translations may contain errors or lack context, Reuters does not guarantee the accuracy of automated translation texts and provides them solely for readers’ convenience. Reuters assumes no liability for any loss or damage resulting from the use of the automated translation feature.)

路透社•2026/10/05 22:56

42% premium, five years to break even with capital cost, Schneider Electric sets record with $23 billion acquisition of PTC, stock price plunges

Schneider Electric’s acquisition of industrial software company PTC marks the latest move by European industrial companies to accelerate their bets on AI. While the strategic rationale is acknowledged by analysts, the financial cost of the deal is heavy. PTC is expected to generate only about $1.5 billion in operating profit by 2031, and the anticipated cost savings to be realized three years from now will only contribute an additional $280 million.

华尔街见闻•2026/10/05 22:11

Spacex closed up 7.6%, reaching a new high since June, helping Musk "regain" his trillionaire status

SpaceX's stock surged nearly 8% on Monday, with Elon Musk's net worth rebounding to approximately $1.03 trillion, reclaiming the top spot on the billionaire list. Morgan Stanley released a bullish report, setting a target price of $300 and stating that the company's value is underestimated. The rally was driven by multiple catalysts, including expectations for Starship recovery, expansion of AI business, and over $12.7 billion in defense contracts.

华尔街见闻•2026/10/05 20:58