Cardano Wallet Vulnerability Exposed in Secondfi Hack, 129M ADA at Stake

WHO:

Cointelegraph - SecondFi is the wallet involved in the exploit.

99 Bitcoins - SlowMist is the entity that identified the wallet-generation flaw.

WHAT:

Cointelegraph - The incident involved attackers draining funds from 374 addresses.

Cointelegraph - A total of 129 million ADA was secured after the exploit.

99 Bitcoins - The wallet-generation flaw has put up to 129 million ADA at risk.

WHERE:

Cointelegraph - The exploit is related to Cardano wallets, specifically those managed by SecondFi.

WHY:

99 Bitcoins - The vulnerability was traced to an address-level issue in the wallet generation process.

HOW:

Cointelegraph - The exploit was traced to an address-level issue, indicating a flaw in the wallet's design or implementation.

(UPDATED June 24, 2026 15:55 UTC)

A significant security incident has emerged involving Cardano wallets managed by SecondFi, where attackers drained funds from 374 addresses due to a wallet-generation flaw identified by SlowMist. This vulnerability has put up to 129 million ADA at risk, although a total of 129 million ADA was ultimately secured after the exploit. The issue stems from an address-level problem in the wallet generation process, highlighting a critical flaw in the design or implementation of the wallet.