SecondFi is a self-custody neofinance platform built for spending, trading, earning, and saving with you in control.
Onchain
- Tweets 6,300
- Following 443
- Followers 13,771
- Likes 11,325
Update on ADA Staking Rewards for Affected Wallets
We’ve received several questions about staking rewards following the recent security incident. Here is what you need to know:
Is my affected wallet still earning rewards?
No. The ADA in affected wallets is no longer staked, meaning these addresses are not actively earning new rewards.
Will lost rewards be compensated?
- Already-allocated rewards: If rewards were allocated and transferred to an affected wallet during the incident period, they will be included in the recovery process.
- Unallocated rewards: Rewards that were not yet allocated or paid out at the time of the incident are not currently included in the claim process.
📖 Read the full breakdown in our Incident FAQ: kb.secondfi.io/en/article/in…
⚠️ Stay safe:
Always verify links through our official channels only: @secondfiapp, @secondfi_jp, and support.secondfi.io.
9
13
53
16,851
An update for affected wallet holders with an upcoming NIGHT claim
Some affected wallet holders are scheduled to claim NIGHT tokens tomorrow. We have been in touch with the Midnight Foundation regarding options for claiming; unfortunately, NIGHT allocations can only be claimed from the original wallet. Claiming from a different, unaffected wallet address is not supported by their system.
Because the vulnerability leaves affected wallets permanently compromised, attempting to claim NIGHT to an affected address puts those tokens at risk. For your security, please do not attempt to redeem your NIGHT allocation using an affected SecondFi wallet.
Please note:
- NIGHT Claim Process: The NIGHT claim process, rules, and redemption mechanism are managed entirely by the Midnight Foundation, a separate organization, and fall outside of SecondFi's control.
- Scope of SecondFi Tools: While our Wallet Migration Tool and Asset Recovery Tool are designed to help you recover assets safely, they cannot process or cover the NIGHT claim.
If you have questions or wish to inquire about alternative safe claiming options, please contact the Midnight Foundation directly through their official channels.
For further details on asset recovery, please visit our Incident FAQ: kb.secondfi.io/en/article/in…
Safety reminder: Only rely on links published through our official channels (@secondfiapp and @secondfi_jp).
20
80
36,151
Security Audit Update: Asset Recovery Tool
As we prepare to launch the Asset Recovery Tool for users affected by the security incident, we are providing an update on our technical progress and security review.
On 3 August 2026, we engaged @zksecurityXYZ to conduct an independent security audit of our proof-tool repository. Developed for SecondFi, the tool allows users to verify control of a Cardano wallet credential through zero-knowledge proofs, without disclosing private keys or derivation paths.
The system is designed to optimize computing and memory requirements so that users can generate proofs directly in their browsers. The project includes custom circuits and prover patches to the consensys/gnark and consensys/gnark-crypto repositories.
Audit Results
- High-severity issues: zkSecurity identified two high-severity issues in the upstream code. We implemented fixes for both issues, and zkSecurity reviewed, tested, and confirmed that the issues were resolved.
- Low-severity issues: Two low-severity issues in the target repository remain open. zkSecurity assessed both issues as not practically exploitable.
The complete audit report, including the detailed technical findings, is available here: reports.zksecurity.xyz/repor…
About the Asset Recovery Tool
- User-initiated: Affected users control when to begin their Recovery Request.
- Cardano-first: The tool uses zero-knowledge proof technology to verify wallet control and facilitate the safe recovery of assets without requiring users to provide seed phrases or private keys.
Next Steps and Launch Timeline
- Smart contract audit: The next testing phase will include a dedicated audit of the recovery smart contract. We will provide a further update when that review is complete.
- Production launch: Subject to completion of the remaining audit and final production checks, the Asset Recovery Tool is expected to launch in the coming weeks.
- User guidance: We will publish step-by-step instructions and user guides before launch.
- Security reminder: Please rely only on information published through SecondFi’s official channels. SecondFi will never ask you to provide your seed phrase or private keys.
Our official channels are @secondfiapp and @secondfi_jp on X, and support.secondfi.io
3
18
121
20,219
🛡 Migration Tool Update
The next version of the wallet migration tool is now available. Update the existing SecondFi application through the official app store on your device.
What's new in this version:
- Wallets that have ADA delegated to a stake pool but do not hold sufficient ADA to cover network fees can now be migrated.
- SecondFi will cover the network fees for these migrations.
- Staked balances now show in the portfolio balance.
If your balance previously showed zero:
- You should now see your staked balance reflected after updating.
- If you have ADA delegated to a stake pool, you still need to migrate.
- There is no need to add funds to your wallet.
Where to migrate
- Migration takes place within an updated version of the official SecondFi application you already have installed, or the official SecondFi browser extension.
- There is no separate migration application, no standalone migration website, and no new application to install.
Our official channels are @secondfiapp and @secondfi_jp on X, and support.secondfi.io.
68
26
89
18,333
🛡 Migration Reminder: Wallets With Staked ADA
Currently, if your portfolio balance on SecondFi shows zero, you may still need to migrate. A wallet that has ADA delegated to a stake pool holds a stake key deposit that is not reflected in the portfolio balance shown in the app.
The next version of the wallet migration tool, which we expect to be available later today, updates this so that staked balances show in the portfolio balance. It also supports migration for wallets in this state.
If your wallet does not have sufficient ADA to cover network fees, do not add funds to it. Wait for that version.
We will confirm here when the update is available.
Our official channels are @secondfiapp and @secondfi_jp on X, and support.secondfi.io.
23
15
86
14,985
Wallet Migration Tool: Choosing Your Destination Address
Before confirming a transfer, verify the complete destination address displayed in the SecondFi application against the receiving address shown in your new wallet (see image below). Don't check only the first and last characters. Check the entire address. Where possible, confirm the address directly within your wallet application rather than relying solely on a copied or displayed value. Blockchain transfers cannot be reversed once signed and submitted.
A significant migration risk is that your transfer is hijacked and redirected to an address you do not control. Malware and browser extensions can alter or replace an address in your clipboard between copying and pasting.
1. Can I send my assets to an exchange?
No. Exchange deposit addresses are not supported by this flow, and sending to one may result in the permanent loss of your assets. Multi-asset and NFT transfers to exchange deposit addresses are commonly lost, and exchanges vary in which Cardano assets they support.
Only send your assets to a wallet you own and control. During migration, you will be asked to confirm, via a checkbox, that your destination address belongs to a Cardano wallet you control and is not an exchange deposit address.
This confirmation is your responsibility: SecondFi does not independently verify whether a destination address is an exchange deposit address, and cannot be responsible for assets lost as a result of an inaccurate confirmation.
2. What does the app check before I can continue?
The destination address you enter is validated before you can proceed.
The app blocks:
- Invalid addresses: anything malformed, or not a valid Cardano mainnet address. Cardano wallet addresses start with addr. If the address you have entered does not start with addr, it will not be accepted.
- Your own current wallet address: you cannot migrate a wallet to itself.
- Addresses linked to the incident: addresses connected to affected or quarantined wallets are blocked, and you will be asked to enter a different address.
Validation checks only format, network compatibility, and identified blocked addresses; it does not verify ownership, security, legitimacy, exchange status, or recoverability.
The exchange-address check relies on your confirmation checkbox. Read the confirmation carefully before ticking.
3. Can a transfer be reversed if I make a mistake?
No. Blockchain transfers cannot be reversed once signed and submitted. If you enter the wrong address, use an exchange deposit address, or choose a wallet you do not control, your assets may be lost and may not be recoverable.
Read the full migration FAQ: kb.secondfi.io/en/article/se…
1
13
55
12,023
Or watch this step-by-step walkthrough: piped.video/vvh9SBwIDPI
1
9
6,951
🛡 Security Reminder: What We Will Never Do
The wallet migration tool is now live in the official SecondFi app and the official SecondFi browser extension. The asset recovery tool has not launched. It will operate outside the official app, and is expected to launch in September.
These commitments apply now and at both launches, without exception:
- Although we may respond to your queries, we will never initiate contact with you by direct message on X, Telegram, Discord, WhatsApp, or any other platform.
- We will never ask you to send funds to any address.
- We will never ask you to install an application, browser extension, or remote access tool from a link sent to you.
- We will never contact you by phone or video call.
- We will never ask you to move the conversation to a private channel.
- SecondFi personnel and support representatives will never ask you to send, disclose, read aloud, or share your seed phrase or private key.
IMPORTANT: The official asset recovery tool, which will operate outside of the official app, may require you to enter your seed phrase as part of the automated recovery process. If instructed to do so, enter it only within the official recovery tool after independently navigating to the verified portal through our official channels. Never provide it to a person, support representative, direct-message account, third-party website, or third-party application.
If an interaction you encounter breaches any of the rules above, treat it as fraudulent, regardless of how convincing or professional it appears.
Our official channels:
- X accounts: @secondfiapp and @secondfi_jp
- Support portal: support.secondfi.io
13
58
9,098
🛡 Security Reminder: Migration Assistance Offers
Fraudsters may offer to guide you through migration, request remote control of your device, or offer to complete the process on your behalf.
Complete the migration yourself
- The migration process is designed to be completed by you alone, in a few steps, with no outside assistance required.
- Never share your screen.
- Never disclose security credentials.
- Never grant anyone access to your device.
Do not act under time pressure
- Fraudsters may claim that SecondFi is closing imminently, that the migration window is about to expire, or that your assets will be forfeited unless you act within hours.
- Any real deadline will be published well in advance through our official channels.
- Treat claims of urgency you cannot verify as a warning sign.
- Take time to confirm the information independently before acting.
Official channels:
- X: @secondfiapp and @secondfi_jp
- Support: support.secondfi.io
20
13
63
11,358
🛡 Security Reminder: Migrate Only Through the Official SecondFi App or Browser Extension
Counterfeit applications and browser extensions have appeared in official app stores, including applications impersonating Cardano wallets.
Use only official SecondFi software
- Migration takes place within an updated version of the official SecondFi application you already have installed, or the official SecondFi browser extension.
- There is no separate migration application.
- There is no standalone migration website.
- There is no new application to install.
- Update the existing SecondFi application through the official app store on your device.
Check your destination address
- Malware and browser extensions can alter or replace an address in your clipboard between copying and pasting.
- Before confirming a transfer, verify the complete destination address displayed in SecondFi against the receiving address shown in your new wallet.
- Do not check only the first and last characters. Check the entire address.
- Blockchain transfers cannot be reversed once signed and submitted.
Official channels:
- X: @secondfiapp and @secondfi_jp
- Support: support.secondfi.io
13
10
39
9,184
Migrating on the Chrome extension
The same migration process, completed on desktop.
First, read the terms and tick the confirmation box to continue. The extension shows what applies to your wallets before you begin.
Step 1: Click Migrate Cardano Wallet Now on your home screen.
Step 2: Enter your new wallet's destination address and check it carefully. Addresses linked to the incident are blocked. If you see this error, enter a different Cardano wallet address that you control.
Step 3: Review the amount, the destination address, and the network fee, then sign to submit. Blockchain transfers cannot be reversed once they are signed and submitted.
Step 4: Your migration is pending on the blockchain. It should complete in a few minutes. You can follow the transactions in Recent activity.
Once the migration is complete, the assets will arrive in the new wallet. Confirm the amount matches before you treat the migration as done.
You will need to repeat this for each wallet to migrate. Keep the original wallet in the app and do not delete the wallet or the application, as they may be needed for asset recovery.
5
14
34
8,470
Read the full migration FAQ: kb.secondfi.io/en/article/se…
Or watch this step-by-step walkthrough: piped.video/vvh9SBwIDPI
2
3
8
3,555
Important Security Reminders:
- We will never ask you to send funds to any address.
- We will never ask you to install an application, browser extension, or remote access tool from a link sent to you.
- Although we may respond to your queries, we will never initiate contact with you by direct message on X, Telegram, Discord, WhatsApp, or any other platform.
- SecondFi personnel and support representatives will never ask you to send, disclose, read aloud, or share your seed phrase or private key.
If anyone asks you to send ADA to an address they provide in order to complete migration, verify your wallet, or release your assets, treat it as fraudulent.
The sophistication of the presentation is not evidence of legitimacy. If an interaction breaches any of the rules above, treat it as fraudulent, regardless of how convincing or professional it appears.
Our official channels are @secondfiapp and @secondfi_jp on X, and support.secondfi.io.
5
1,148
🛡 Security Warning: How to Protect Your Wallet
Scammers are using advanced AI tools to create very convincing fake messages. Follow these rules to keep your crypto safe.
How to spot a scam:
- We will never message you first on X, Telegram, Discord, WhatsApp, or any other app. If you get a direct message from us, it is a scammer.
- We will never ask you to "verify," "sync," or "unlock" your wallet. These processes do not exist.
- We will never ask you to send funds to any crypto address.
- Our asset recovery tool is not live yet. Anyone offering to help you recover assets is a scammer.
How to migrate safely:
- Migrate only inside the official SecondFi app you already have installed, or the official browser extension.
- Do not download new apps or visit separate migration websites.
Important: Blockchain transactions are permanent. You cannot undo a transfer once you send it. Always check addresses carefully before confirming.
Official accounts:
- X (Twitter): @secondfiapp and @secondfi_jp
- Support: support.secondfi.io
10
13
27
6,871
🛡 How to migrate to a new Cardano wallet
SecondFi is ceasing operations. If you hold ADA or Cardano native assets in SecondFi, move them to a Cardano wallet you control.
The migration tool is inside the SecondFi app you already have installed.
Full steps below.
1/13
14
30
86
11,514
Non-Cardano assets:
- The migration tool moves Cardano assets only.
- If you hold non-Cardano assets, move them separately.
- Send them to a multichain wallet you control.
12/13
2
5
1,411
🛡 Important security reminders:
We will never:
- Ask you to send funds to any address.
- Ask you to install an application, browser extension, or remote access tool from a link sent to you.
- Message you first on X, Telegram, Discord, WhatsApp, or any other platform. We may reply to you, but we never start the conversation.
- Ask you to send, show, read out, or share your seed phrase (recovery credentials) or private key.
If anyone asks you to send ADA to complete migration, verify your wallet, or release your assets, treat it as fraudulent.
Scams can look professional. That is not proof they are real. If a message breaks any rule above, treat it as fraudulent.
Official accounts:
- X: @secondfiapp and @secondfi_jp
- Support: support.secondfi.io
13/13
4
1,297