EMURGO’s Wallet Legacy Under Fire After SecondFi Drains 178 Accounts: Cardano in Crisis?

Cardano News: SecondFi, the rebranded successor to EMURGO’s Yoroi wallet, was exploited on June 23, 2026, with approximately 16 million ADA drained from 178 wallets through a flaw in the platform’s web wallet generation software, producing confirmed losses of roughly $2.4 million at the time of reporting, with blockchain security firm SlowMist flagging on-chain address analysis that puts the theoretical upper bound significantly higher, pending a full technical audit.

SecondFi entered maintenance mode immediately following the breach, issued a statement on X confirming a balance snapshot had been taken as a precautionary measure, and pledged that further details regarding compensation plans and investigation findings would follow.

As of the time of writing, no compensation timeline, eligibility framework, or technical post-mortem has been published, and EMURGO, the Cardano Foundation, and IOG have each issued zero public statements regarding the incident.

The open question the market must now resolve is whether that institutional silence reflects a deliberate legal posture ahead of a formal compensation announcement or a structural accountability gap in how Cardano’s founding governance bodies treat wallet-level user-fund protection as a collective obligation.

Cardano News: What the Web Wallet Generation Flaw Actually Reveals About the Yoroi Trust Inheritance

Further context from Cardano news significantly enhances the raw $2.4 million figure. SecondFi is not a peripheral DeFi application or an experimental third-party tool, it is the direct institutional successor to Yoroi, a wallet EMURGO launched in 2018 and which spent nearly eight years as Cardano’s primary lightweight self-custody option, endorsed at the ecosystem level alongside Daedalus and, later, Lace.

In April 2026, EMURGO confirmed on its own press page that “Yoroi Wallet is evolving into SecondFi,” framing the transition explicitly as a continuation rather than a departure.

That lineage is the central fact that separates this crypto hack from a standard DeFi exploit: users who trusted the Yoroi brand for years were migrated onto SecondFi’s new infrastructure, including its proprietary wallet generation stack, the very component that failed.

The causal chain runs as follows: SecondFi’s web wallet generation software contained a vulnerability that exposed private key material for wallets created or accessed through the web interface; an attacker identified and exploited that flaw on June 23; 178 wallets were drained of ADA, tokens, and NFTs before the platform identified the breach and moved to maintenance mode.

Critically, per independent security analysis cited by DeFi Planet, only wallets generated through SecondFi’s web interface appear to be in scope; hardware wallets and seed phrases predating the new wallet-generation flow are considered largely unaffected.

Blink Labs, a Cardano infrastructure developer, stated plainly that “the wallets generated are all unsafe” and instructed users to migrate to alternative wallets immediately, language that frames the failure as a systemic issue in key-generation architecture rather than an isolated software bug.

SlowMist founder Yu Xian indicated to Chinese-language crypto media that on-chain analysis of attacker addresses suggests a theoretical loss exceeding $20 million, potentially reaching up to 129 million ADA plus additional tokens, with the final figure contingent on the independent technical audit SecondFi says is in progress.

The breach does not implicate the Cardano ledger or consensus layer; the protocol itself remained secure throughout. But that distinction, while technically accurate, offers little comfort to the 178 wallet holders whose ADA balances were drained, given that SecondFi’s Yoroi lineage had positioned it as the ecosystem’s flagship self-custody solution.

The failure lands on Cardano’s trust layer precisely because EMURGO built and endorsed the product that failed.

The post EMURGO’s Wallet Legacy Under Fire After SecondFi Drains 178 Accounts: Cardano in Crisis? appeared first on icobench.com.