SecondFi plans to refund users within two weeks after a nonce derivation flaw in its Cardano wallet software led to the theft of 16 million ADA from 374

SecondFi traced a Cardano wallet exploit to an address-level issue after losses across 374 addresses, while 129 million ADA was secured.

SecondFi was hit by three separate attacks exploiting a flaw in its wallet generation software. A further 129 million ADA was secured by the team before attackers could reach it.