Root Cause: Deterministic Nonce Flaw
Published 6/25/2026, 1:49:58 PM
On June 23, 2026, SecondFi (formerly the Yoroi wallet) suffered a security exploit that resulted in the theft of approximately 16 million ADA (~$2.4 million USD) [Source: https://happycoin.news/en/cardano-wallets-drained-of-2-4m-after-self-custody-exploit/]. The incident was caused by a cryptographic flaw in the wallet's signing software rather than a vulnerability in the Cardano blockchain itself.
Root Cause: Deterministic Nonce Flaw
The exploit stemmed from a deterministic nonce derivation flaw within SecondFi's proprietary web wallet-generation and signing software [Source: https://x.com/secondfiapp].
In standard cryptography, a "nonce" (a number used once) must be unique and random for every digital signature. SecondFi’s software used a flawed process that made these nonces predictable. This allowed attackers to:
- Reconstruct Private Keys: By analyzing public blockchain data from signed transactions, attackers could mathematically derive the private keys of affected addresses [Source: https://x.com/secondfiapp].
- Bypass Seed Phrase Security: Because the vulnerability existed at the address level during the signing process, simply moving a seed phrase to a different wallet provider (like Daedalus or Eternl) did not protect users if the address had already been compromised by the flawed signer [Source: https://x.com/blinklabs_io].
Impact and Mitigation
While $2.4 million was stolen, a "white-hat" intervention by the SecondFi team successfully secured 129 million ADA (roughly 90% of at-risk funds) by sweeping them into a secure custodian before the attackers could reach them [Source: https://happycoin.news/en/cardano-wallets-drained-of-2-4m-after-self-custody-exploit/].
| Metric | Details |
|---|---|
| Total ADA Stolen | ~16 Million ADA ($2.4M USD) |
| Total ADA Rescued | ~129 Million ADA |
| Affected Wallets | 374 unique addresses |
| ADA Price Impact | Dropped ~12% to a multi-year low of $0.139 |
| Vulnerability Type | Deterministic nonce derivation in the signer |
Current Status
The exploit led to a significant market reaction, with ADA prices hitting multi-year lows following the news. Security firms have confirmed that this was not a standard broken Pseudo-Random Number Generator (PRNG) issue, but a specific flaw in how signatures were generated [Source: https://x.com/coinspect].
- User Action: SecondFi has advised users not to transact or attempt to restore recovery phrases in other wallets, as the vulnerability may activate upon signing [Source: https://x.com/blinklabs_io].
- Recovery: A "Restoration Fund" and a claims process via
support.secondfi.iohave been announced, though independent verification of the reimbursement timeline and the results of an ongoing third-party security audit are still pending [Note: not independently confirmed].