SecondFi Is Shutting Down: Official EMURGO Recovery Update

Then, what happened to you is something completely different than what happened to all the others in this incident.

They can only do that if they have access to your keys.

Since you are so sure that you did not do a transaction, they cannot have gained it in the same way as for all the other victims.

So, perhaps, it was one of the more usual attack vectors:

E.g., this does not make a lot of sense: As far as I know, Yoroi did not store the seed phrase, so it couldn’t have displayed it. And if it could, why would you have to enter it again? As @Neo_Spank said, the migration should usually not need entering the seed phrase again.

So, could be that you just fell for a classical malware that was not SecondFi and tricked you into giving away your seed phrase.

Highly unlikely. The maintenance mode was primarily helpful to prevent people from doing transactions and exposing their private keys by that. But you say that you haven’t done any transactions, anyway, and after the maintenance mode, SecondFi or what is left of it doesn’t have the ability to do transactions anymore.

If the attackers already have private keys and/or seed phrase, they don’t care at all if the user’s original wallet app is in “maintenance mode” or not. They can empty the account from anywhere on the planet using any wallet app or custom software.

1 Like

Thanks for the clear breakdown.

Security incidents hurt, but EMURGO’s response here seems solid: patch first, recover funds, give users a path to hardware wallets. That’s the right order of priorities.

SecondFi shutting down is sad, but transparency beats pretending everything is fine. Respect for that.

For the community, this is another wake-up call: hardware wallets are no longer optional. Hope the status-check tool helps affected users quickly. Stay safe everyone

1 Like

Hola,
Utilizo un hardware Ledger Nano X. Veo que ahora es SecondFi. El tiempo que SecondFi está operativo no he conectado mi Ledger. No veo la necesidad de migrar, pero el mensaje para que migre está incrustado en el visualizador de SecondFi y no sé cuando desaparecerá. Alquien me lo puedo aclarar?. SecondFi funcionará para los no afectados por los riesgos de seguridad habidos o por razones de seguridad es mejor pasarse a Lace?. Cómo pasarse a Lace?. Es fácil, lo recomendáis?. Puedo pasarme a Lace dado que tengo mis ADA delegados?

Hardware wallets were not affected so in your case, you don’t have to worry at all

1 Like

If hardware wallets like the Ledger Nano X were not affected, is there any reason to switch from SecondFi to Lace for long-term security, and would doing so affect my existing ADA delegation or staking rewards?

1 Like

yes you will need to switch from SecondFi/Yoroi as they are shutting down. You will have no choice.

You need to switch wallets, redo your delegation or at least check if it is delegating or not.

1 Like

If you just connect the same hardware wallet to another wallet app, there is obviously no need to (un)delegate, move assets or anything like that. It’s the same effing wallet, just controlled by a different piece of software.

The confusion between wallets and wallet apps and that crypto users are too effing dumb to understand the difference is one of the reasons they are such willing victims of scammers all the time.

1 Like

Muchas gracias. Lace es una buena opción no?

https://cardano.org/wallets/

Yes, Lace is okay. Others are also.

1 Like

Then, I should choose in Lace to connect my hardware wallet to Lace, and to avoid the options create a new wallet or restore wallet. Is it right?