SecondFi Recovery Offer Expires With No Response From Second Attacker

SecondFi's white-hat proposal for the second exploit yielded no reply by the July 11 deadline. The project retains rights to pursue legal action and further investigation into the theft.

Woofun AI reports that SecondFi disclosed details regarding a second security incident where an unrelated third party exploited a vulnerability to steal approximately 4 million ADA and various Cardano native tokens. The project team contacted the attacker via on-chain messages, proposing a white-hat resolution that required returning 90% of the stolen assets—roughly 3.618 million ADA and related tokens—to a recovery address, allowing the attacker to retain 10% as a reward. This offer expired at 7:59 on July 11, 2026, without any response from the recipient. SecondFi emphasized that the lapse of this deadline does not preclude them from continuing investigations, coordinating with third parties, or seeking legal and law enforcement assistance.