Security Incident Update: Asset Transfer and Recovery Fund
New developments have emerged regarding the recent security incident involving Cardano wallet service provider SecondFi. A white hat security team participating in the asset recovery effort has transferred a portion of the successfully retrieved funds to a dedicated fund address established by EMURGO.
Fund Destination and Transparency Pledge
The primary purpose of this fund is to provide the community with a clear and transparent view of the asset recovery progress. Officials have specifically emphasized that this address is for viewing and tracking purposes only. Users are strongly warned not to send any funds to this address.
Official Urgent Security Advisory
In tandem with this update, SecondFi has issued a critical security reminder to all users. They reiterated several fundamental safety principles:
- The official team will never ask for private keys, seed phrases, or wallet credentials via any channel, including email or direct messages.
- The official team does not proactively contact users through private channels regarding asset issues.
Beware of Fake Apps and Phishing Attempts
There has been a proliferation of fake SecondFi browser extensions and applications in the market. The official, legitimate browser extension is available exclusively on the Chrome Web Store, identifiable by the blue verification badge.
The only safe sources for official links and information are the secondfi.io website and its official support channels. Users must verify the source meticulously before downloading any extension or application to avoid falling victim to phishing scams and incurring further losses.