UPDATE 6: SecondFi launches asset recovery tool as affected users can finally submit recovery requests
Since our last update, the SecondFi recovery process has reached another major milestone. On October 7, SecondFi announced that its official Asset Recovery Tool is now live, allowing users whose wallets were affected by the June 2026 security incident to verify ownership, review assets eligible for recovery, and submit requests to transfer those assets to a new Cardano wallet.
For affected users, this is the development many have been waiting for. The recovery process has moved beyond preparation and estimates, with a formal system now available for submitting recovery requests.
However, the process is not instant. SecondFi says proof generation can take approximately 15 minutes, while submitted claims may take up to five working days to process.
The recovery tool is finally live //
On October 7, SecondFi announced that its Asset Recovery Tool was officially available through its website.
The tool is designed specifically for users whose wallets were affected by the June security incident. It allows users to verify control of an affected wallet, review an estimate of eligible assets, and submit a recovery request directing those assets to a new Cardano wallet they control. SecondFi has also clarified that users do not need to have submitted a support ticket before beginning the process. Submitting a recovery request through the official tool initiates the claims process for the affected wallet.
This is an important change from previous updates, when affected users were still waiting for the recovery system to become available. The company has emphasized that the recovery tool is accessed through its official website in a web browser, rather than through the SecondFi application. Users should type the official domain directly into their browser and verify the address carefully before proceeding.
Recovery is different from migration //
One of the most important distinctions in this update is the difference between wallet migration and asset recovery.
The migration tool, which launched in August, allows users who still have Cardano assets remaining in their SecondFi wallets to move those assets to a new wallet. The Asset Recovery Tool serves a different purpose. It is intended for users whose assets were affected by the June incident and who need to submit a request for eligible assets to be recovered. SecondFi says migration does not affect an existing recovery claim. In other words, users with remaining assets can use the migration process to move them away from SecondFi, while users seeking recovery of assets lost during the incident must use the separate recovery tool.
The two processes should not be confused, particularly as SecondFi continues winding down its platform.
How the recovery process works //
SecondFi has outlined a four-step process for affected users.
Step 1: Verify the affected wallet
Users must enter the recovery phrase associated with the affected wallet. SecondFi supports 12-, 15-, and 24-word recovery phrases. The company instructs users to complete this step only on a private, trusted computer, with no screen sharing or recording running and nobody else able to see the screen. Users should verify the official website address before entering any recovery information.
Step 2: Review eligible assets
The tool checks the wallet's addresses against the incident records and displays an estimated breakdown of assets eligible for recovery. SecondFi explains that each affected address is treated as a separate request. Only addresses identified as having recoverable assets are submitted through the process. The displayed amounts are estimates based on the incident snapshot, meaning the final recovery amount may differ.
Step 3: Enter a new destination wallet
Users must provide the receiving address of a newly created Cardano wallet that they control. This step requires particular attention because the destination address is bound into the recovery proof and cannot be changed after submission. SecondFi warns users not to use the affected wallet, an exchange deposit address, or any destination they do not control.
Step 4: Generate the proof and submit
The tool generates a zero-knowledge proof locally on the user's device for each eligible affected address. The proof binds the recovery request to the selected destination address before the request is submitted. SecondFi says this process can take approximately 15 minutes, depending on the computer's processing power, internet connection, and the number of affected addresses. Users must keep their browser window open and avoid leaving or refreshing the page until proof generation is complete. If the process is interrupted, the tool should provide a retry option.
Up to five working days for recovery //
Although the recovery tool is now live, users should not expect their assets to arrive immediately. SecondFi has outlined two separate timeframes. Proof generation can take up to approximately 15 minutes while the user completes the process in their browser. After submission, claim processing can take up to five working days. The company says requests are processed in batches as part of its security procedures.
Once a request has been validated and submitted, users are instructed to wait for processing rather than take additional action unless the tool or official SecondFi channels provide further instructions. SecondFi has also provided a status checker for users who want to monitor their requests. According to the announcement, users should enter their new destination wallet address, rather than the address of the affected wallet, to check their status. For users who have been waiting since June, this is a significant step forward. However, the launch of the tool does not mean every claim has already been approved or that every affected asset is guaranteed to be recovered.
Why the recovery phrase is required //
One of the most sensitive aspects of the recovery process is the requirement to enter the affected wallet's recovery phrase.
SecondFi says the phrase is used locally in the browser to generate the zero-knowledge proof and is not stored or transmitted. According to the company, only the proof is submitted with the recovery request. This is a critical security distinction, but it also means users need to be especially careful about where and how they access the recovery tool. SecondFi warns that certain anti-phishing tools, anti-scam software, and browser extensions may display warnings or blank screens when users access the tool or enter their recovery phrase.
The company says such warnings do not necessarily mean the official tool is malicious. However, users should not ignore security warnings blindly. They should independently verify the domain and consult official SecondFi support if anything appears suspicious. The official recovery domain should be entered directly into the browser, with HTTPS enabled and no additional characters, misspellings, or lookalike words. Users should never enter their recovery phrase through links sent in direct messages, emails, advertisements, or other third-party communications.
No fees, no deposits, and no extra applications //
SecondFi has reiterated several important warnings intended to protect users from recovery scams.
The company says no recovery fee is required. Users should not be asked to send ADA or another asset, pay a fee, sign an unrelated transaction, or transfer funds to an address supplied by someone claiming to assist with recovery. SecondFi also says users do not need to install a separate application or browser extension to complete the process. The recovery tool runs in the browser, and users should only access it through the official website. The company has further warned that it will never contact users first to ask them to begin recovery.
These warnings are particularly important because wallet recovery incidents can create opportunities for scammers to target people who have already suffered financial losses. Anyone offering an alternative recovery service, requesting payment, or asking for a recovery phrase outside the official recovery flow should be treated with extreme caution.
What can actually be recovered? //
The tool provides an estimate of eligible assets based on the incident snapshot, but SecondFi cautions that the final amount may differ.
The announcement also addresses affected NFTs. For each eligible NFT that cannot be returned directly, SecondFi says a fixed amount of 30 ADA will be included in the ADA shown for the relevant affected address. This is an important detail for users who held NFTs in affected wallets, as the recovery calculation may account for certain assets differently from a straightforward return of the original holdings. Ultimately, the amount displayed by the tool should be understood as an estimate rather than a guarantee of the final recovery outcome.
The original wallet must remain out of use //
SecondFi continues to advise affected users not to use their compromised wallets again.
The company explicitly warns that completing the recovery process does not make an affected wallet safe to use. Users should therefore direct eligible recovery assets to a new Cardano wallet that they control, rather than attempting to resume normal activity with the compromised wallet. For additional security, SecondFi recommends using a hardware wallet as the destination. Hardware wallets can keep private keys offline, providing an additional layer of protection when managing recovered assets.
Users should also take care to preserve their recovery information and follow the instructions provided through official channels.
The final phase of the SecondFi recovery effort //
The launch of the Asset Recovery Tool marks one of the most significant developments since the June incident.
In August, SecondFi introduced the wallet migration tool for users who still had assets remaining on the platform. Now, with the recovery tool available, affected users have a formal process for verifying their wallets and submitting requests for eligible assets. The two systems address different groups of users, but both reflect the same broader reality: SecondFi is winding down, and its remaining focus is on helping users move assets away from the platform or recover eligible assets affected by the incident. There are still important uncertainties. The company has stated that claims may take up to five working days to process, and the estimated amounts shown by the tool may differ from final recovery amounts. The launch also does not, by itself, establish the final outcome for every affected user.
For now, the next milestone is the processing of submitted claims and the arrival of recovered assets in users' new destination wallets.
What happens next? //
The focus now shifts from the availability of the recovery tool to how the claims process unfolds.
Affected users can begin submitting requests, while those who have already submitted requests can monitor their status using the destination address specified by SecondFi. The coming days should provide a clearer picture of how the process works in practice, how long claims take to complete, and whether users receive the eligible assets indicated by the tool. As always, users should verify all instructions independently through SecondFi's official channels and avoid anyone offering shortcuts or alternative recovery methods. After months of uncertainty, the recovery process has finally reached a stage where affected users can take concrete action.
The tool is live. Claims can now be submitted. And the next major question is how smoothly the recovery process will deliver assets back to the users who lost them.
Wrap up //
SecondFi's Asset Recovery Tool is now live, marking a major turning point in the recovery effort following the June security incident.
Users can now verify affected wallets, review estimated eligible assets, and submit requests to recover those assets to a new Cardano wallet. Proof generation can take approximately 15 minutes, while claim processing may take up to five working days.
The most important takeaway is that the recovery process is now open, but users must remain vigilant about security, carefully verify their destination addresses, and understand that estimated recovery amounts are not guarantees.
After months of waiting, the next chapter is no longer just about preparing a recovery system. It is about seeing how the recovery process works for affected users.
We will continue monitoring developments and share updates as more information becomes available. Subscribe to stay informed.
Original: SecondFi / Yoroi Wallet Drain
UPDATE 2: SecondFi / Yoroi Wallet Drain
UPDATE 3: SecondFi / Yoroi Wallet Drain
UPDATE 4: SecondFi / Yoroi Wallet Drain
UPDATE 5: SecondFi / Yoroi Wallet Drain
UPDATE 6: SecondFi / Yoroi Wallet Drain
Since our last update, the SecondFi recovery process has reached another major milestone. On October 7, SecondFi announced that its official Asset Recovery Tool is now live, allowing users whose wallets were affected by the June 2026 security incident to verify ownership, review assets eligible for recovery, and submit requests to transfer those assets to a new Cardano wallet.
For affected users, this is the development many have been waiting for. The recovery process has moved beyond preparation and estimates, with a formal system now available for submitting recovery requests.
However, the process is not instant. SecondFi says proof generation can take approximately 15 minutes, while submitted claims may take up to five working days to process.
The recovery tool is finally live //
On October 7, SecondFi announced that its Asset Recovery Tool was officially available through its website.
The tool is designed specifically for users whose wallets were affected by the June security incident. It allows users to verify control of an affected wallet, review an estimate of eligible assets, and submit a recovery request directing those assets to a new Cardano wallet they control. SecondFi has also clarified that users do not need to have submitted a support ticket before beginning the process. Submitting a recovery request through the official tool initiates the claims process for the affected wallet.
This is an important change from previous updates, when affected users were still waiting for the recovery system to become available. The company has emphasized that the recovery tool is accessed through its official website in a web browser, rather than through the SecondFi application. Users should type the official domain directly into their browser and verify the address carefully before proceeding.
Recovery is different from migration //
One of the most important distinctions in this update is the difference between wallet migration and asset recovery.
The migration tool, which launched in August, allows users who still have Cardano assets remaining in their SecondFi wallets to move those assets to a new wallet. The Asset Recovery Tool serves a different purpose. It is intended for users whose assets were affected by the June incident and who need to submit a request for eligible assets to be recovered. SecondFi says migration does not affect an existing recovery claim. In other words, users with remaining assets can use the migration process to move them away from SecondFi, while users seeking recovery of assets lost during the incident must use the separate recovery tool.
The two processes should not be confused, particularly as SecondFi continues winding down its platform.
How the recovery process works //
SecondFi has outlined a four-step process for affected users.
Step 1: Verify the affected wallet
Users must enter the recovery phrase associated with the affected wallet. SecondFi supports 12-, 15-, and 24-word recovery phrases. The company instructs users to complete this step only on a private, trusted computer, with no screen sharing or recording running and nobody else able to see the screen. Users should verify the official website address before entering any recovery information.
Step 2: Review eligible assets
The tool checks the wallet's addresses against the incident records and displays an estimated breakdown of assets eligible for recovery. SecondFi explains that each affected address is treated as a separate request. Only addresses identified as having recoverable assets are submitted through the process. The displayed amounts are estimates based on the incident snapshot, meaning the final recovery amount may differ.
Step 3: Enter a new destination wallet
Users must provide the receiving address of a newly created Cardano wallet that they control. This step requires particular attention because the destination address is bound into the recovery proof and cannot be changed after submission. SecondFi warns users not to use the affected wallet, an exchange deposit address, or any destination they do not control.
Step 4: Generate the proof and submit
The tool generates a zero-knowledge proof locally on the user's device for each eligible affected address. The proof binds the recovery request to the selected destination address before the request is submitted. SecondFi says this process can take approximately 15 minutes, depending on the computer's processing power, internet connection, and the number of affected addresses. Users must keep their browser window open and avoid leaving or refreshing the page until proof generation is complete. If the process is interrupted, the tool should provide a retry option.
Up to five working days for recovery //
Although the recovery tool is now live, users should not expect their assets to arrive immediately. SecondFi has outlined two separate timeframes. Proof generation can take up to approximately 15 minutes while the user completes the process in their browser. After submission, claim processing can take up to five working days. The company says requests are processed in batches as part of its security procedures.
Once a request has been validated and submitted, users are instructed to wait for processing rather than take additional action unless the tool or official SecondFi channels provide further instructions. SecondFi has also provided a status checker for users who want to monitor their requests. According to the announcement, users should enter their new destination wallet address, rather than the address of the affected wallet, to check their status. For users who have been waiting since June, this is a significant step forward. However, the launch of the tool does not mean every claim has already been approved or that every affected asset is guaranteed to be recovered.
Why the recovery phrase is required //
One of the most sensitive aspects of the recovery process is the requirement to enter the affected wallet's recovery phrase.
SecondFi says the phrase is used locally in the browser to generate the zero-knowledge proof and is not stored or transmitted. According to the company, only the proof is submitted with the recovery request. This is a critical security distinction, but it also means users need to be especially careful about where and how they access the recovery tool. SecondFi warns that certain anti-phishing tools, anti-scam software, and browser extensions may display warnings or blank screens when users access the tool or enter their recovery phrase.
The company says such warnings do not necessarily mean the official tool is malicious. However, users should not ignore security warnings blindly. They should independently verify the domain and consult official SecondFi support if anything appears suspicious. The official recovery domain should be entered directly into the browser, with HTTPS enabled and no additional characters, misspellings, or lookalike words. Users should never enter their recovery phrase through links sent in direct messages, emails, advertisements, or other third-party communications.
No fees, no deposits, and no extra applications //
SecondFi has reiterated several important warnings intended to protect users from recovery scams.
The company says no recovery fee is required. Users should not be asked to send ADA or another asset, pay a fee, sign an unrelated transaction, or transfer funds to an address supplied by someone claiming to assist with recovery. SecondFi also says users do not need to install a separate application or browser extension to complete the process. The recovery tool runs in the browser, and users should only access it through the official website. The company has further warned that it will never contact users first to ask them to begin recovery.
These warnings are particularly important because wallet recovery incidents can create opportunities for scammers to target people who have already suffered financial losses. Anyone offering an alternative recovery service, requesting payment, or asking for a recovery phrase outside the official recovery flow should be treated with extreme caution.
What can actually be recovered? //
The tool provides an estimate of eligible assets based on the incident snapshot, but SecondFi cautions that the final amount may differ.
The announcement also addresses affected NFTs. For each eligible NFT that cannot be returned directly, SecondFi says a fixed amount of 30 ADA will be included in the ADA shown for the relevant affected address. This is an important detail for users who held NFTs in affected wallets, as the recovery calculation may account for certain assets differently from a straightforward return of the original holdings. Ultimately, the amount displayed by the tool should be understood as an estimate rather than a guarantee of the final recovery outcome.
The original wallet must remain out of use //
SecondFi continues to advise affected users not to use their compromised wallets again.
The company explicitly warns that completing the recovery process does not make an affected wallet safe to use. Users should therefore direct eligible recovery assets to a new Cardano wallet that they control, rather than attempting to resume normal activity with the compromised wallet. For additional security, SecondFi recommends using a hardware wallet as the destination. Hardware wallets can keep private keys offline, providing an additional layer of protection when managing recovered assets.
Users should also take care to preserve their recovery information and follow the instructions provided through official channels.
The final phase of the SecondFi recovery effort //
The launch of the Asset Recovery Tool marks one of the most significant developments since the June incident.
In August, SecondFi introduced the wallet migration tool for users who still had assets remaining on the platform. Now, with the recovery tool available, affected users have a formal process for verifying their wallets and submitting requests for eligible assets. The two systems address different groups of users, but both reflect the same broader reality: SecondFi is winding down, and its remaining focus is on helping users move assets away from the platform or recover eligible assets affected by the incident. There are still important uncertainties. The company has stated that claims may take up to five working days to process, and the estimated amounts shown by the tool may differ from final recovery amounts. The launch also does not, by itself, establish the final outcome for every affected user.
For now, the next milestone is the processing of submitted claims and the arrival of recovered assets in users' new destination wallets.
What happens next? //
The focus now shifts from the availability of the recovery tool to how the claims process unfolds.
Affected users can begin submitting requests, while those who have already submitted requests can monitor their status using the destination address specified by SecondFi. The coming days should provide a clearer picture of how the process works in practice, how long claims take to complete, and whether users receive the eligible assets indicated by the tool. As always, users should verify all instructions independently through SecondFi's official channels and avoid anyone offering shortcuts or alternative recovery methods. After months of uncertainty, the recovery process has finally reached a stage where affected users can take concrete action.
The tool is live. Claims can now be submitted. And the next major question is how smoothly the recovery process will deliver assets back to the users who lost them.
Wrap up //
SecondFi's Asset Recovery Tool is now live, marking a major turning point in the recovery effort following the June security incident.
Users can now verify affected wallets, review estimated eligible assets, and submit requests to recover those assets to a new Cardano wallet. Proof generation can take approximately 15 minutes, while claim processing may take up to five working days.
The most important takeaway is that the recovery process is now open, but users must remain vigilant about security, carefully verify their destination addresses, and understand that estimated recovery amounts are not guarantees.
After months of waiting, the next chapter is no longer just about preparing a recovery system. It is about seeing how the recovery process works for affected users.
We will continue monitoring developments and share updates as more information becomes available. Subscribe to stay informed.
Original: SecondFi / Yoroi Wallet Drain
UPDATE 2: SecondFi / Yoroi Wallet Drain
UPDATE 3: SecondFi / Yoroi Wallet Drain
UPDATE 4: SecondFi / Yoroi Wallet Drain
UPDATE 5: SecondFi / Yoroi Wallet Drain
UPDATE 6: SecondFi / Yoroi Wallet Drain
×
SUBSCRIBE TO SESSION ///
Catch the freshest Session sent straight to your inbox as soon as it's dropped!
Catch the freshest Session sent straight to your inbox as soon as it's dropped!
