Cardano-Linked SecondFi Exploit Drains User Wallets, Forcing EMURGO to Step Back From Funding Group

An exploit at SecondFi, an application in the Cardano ecosystem, drained user funds by abusing a flaw in the service's wallet address-generation system, according to CryptoSlate. The root cause was a logic defect in how the software derived user addresses rather than a break in Cardano's base protocol, which locates the failure at the application and user layer.

The consequences reached the network's governance. EMURGO, one of the founding entities, said it is stepping down from Pentad, the five-member group that coordinates Cardano's infrastructure funding, to concentrate resources on recovering the lost funds. That connects an application-level bug to the organizational structure that coordinates the network's funding.

The incident tracker Rekt News is carrying the SecondFi case alongside other recent entries including Secret Network. Separately, United States investigators describe Bitcoin cash machines as the final step in an $11 billion scam pipeline that relies on social engineering rather than smart-contract flaws, and Malaysian authorities seized more than 75,000 mining machines in an electricity-theft crackdown that led to 629 arrests.