SecondFi has renewed its bounty offer to the hacker who breached the Cardano-focused wallet in June, as investigators tie digital markers in the attack to North Korea's Lazarus Group. The wallet's operators, together with the Cardano Foundation and Input Output Group, are rolling out a three-stage plan to repay the 374 wallets hit by the theft of 16.1 million ADA.
SecondFi published a renewed appeal to the hacker behind June's breach of the platform, repeating that its bounty offer for the full return of the stolen funds remains open. SecondFi said in an official statement: "Our standing offer remains open. We urge the party involved to contact us…" through the channels it has listed. The company added that a voluntary return is the cleanest and most direct path toward resolving the situation for all parties.
Lazarus Group links emerge
After independent analytics agency Groom Lake joined the investigation, researchers found digital markers in the transactions of one of the participants in the attack. These markers reportedly match methods used by North Korea's Lazarus Group.
Three-stage plan to repay users
Since the likelihood of a response from Lazarus Group is extremely low, SecondFi, together with the Cardano Foundation and Input Output Group, has launched a three-stage compensation plan. Late July is the current stage, covering collection, verification and processing of official claims submitted by affected customers.
Mid-August 2026 will bring tools for securely exporting surviving assets to third-party platforms, with users advised to move funds to a hardware wallet. Early September 2026 is set for an automated compensation portal powered by zero-knowledge proofs.
Breach compromised 374 wallets
The security incident occurred between June 21 and June 23, 2026, when attackers compromised 374 digital wallets on SecondFi, formerly known as Yoroi Wallet by EMURGO. The hackers stole 16.1 million ADA, worth approximately $2.4 million to $2.6 million at the time of the theft.
SecondFi's technical team responded in time and secured another 129 million ADA that had been at risk, transferring the funds to an independent custodian. Because of the severe financial and reputational consequences, EMURGO's management decided on the complete wind-down and liquidation of the SecondFi and Yoroi brands, deeming the project unviable for continued operations.
Source: U.Today
Trading involves risk.
Risk Disclaimer
