u/Extension-Object6847

SecondFi incident timeline and unanswered questions regarding NIGHT holders

April 22 — Yoroi rebrands to SecondFi, updates its legal terms, and requires users to accept new agreements when downloading the new app. The company also outlines plans for future features, including debit-card-style crypto transactions.

June 23 — Approximately eight weeks later, reports emerge of wallets being compromised and assets being drained.

Shortly afterward, SecondFi announces its shutdown. The timing of these events, alongside the subsequent difficulties users have experienced recovering their assets, raises several questions that I believe deserve further clarification.

July 8th - Emurgo steps down from board

One particular concern is what happens when affected users attempt to thaw their NIGHT tokens. In my case, approximately 4,500 NIGHT tokens were transferred out almost immediately after redemption, while the recovery process returned only 40 tokens. I am concerned about whether any remaining allocation can be claimed safely and what protections, if any, are available to affected holders.

I would also like to understand the scope of the incident more clearly. Were the affected wallets predominantly created during the period when users were preparing for the NIGHT distribution? How much of the stolen or affected supply has been recovered, and what is known about the destinations of the remaining assets?

Another question I would welcome clarification on is whether SecondFi, its associated entities, or individuals involved in the project held NIGHT tokens themselves, and whether any such holdings were affected by the incident.

Given SecondFi's previous relationship with EMURGO and its role in the Cardano ecosystem, I believe transparency is particularly important. What technical findings have been established regarding the wallet compromises? What happened to the unrecovered assets? And what safeguards are available to users who still have outstanding NIGHT allocations?

I am not claiming to know what happened behind the scenes, and I am not accusing any individual or organization of wrongdoing. However, the sequence of events, the recovery outcomes, and the uncertainty surrounding future NIGHT claims leave legitimate questions unanswered.

I would appreciate a factual discussion from anyone with verifiable information, official statements, or on-chain evidence that could help clarify what happened and what affected NIGHT holders can expect going forward.

Secondfi hack- Very worrying timeline for cardano community

April 22 — Yoroi rebrands to SecondFi, updates its legal fine print, and requires users to sign new agreements when downloading the new app.

Outlines plans for the future, including debit-card-like crypto transactions. This could potentially provide plausible deniability later, allowing them to point to these plans as evidence that they were thinking long-term and operating legitimately.

June 23 — Approximately eight weeks later, the hacks occur, and wallets are drained.

Awfully strange timing and circumstances, if you ask me.

Shortly afterward, SecondFi announces its complete shutdown. Again, it seems strange that such an announcement would come so quickly after the hack. One concern is whether shutting down the service effectively leaves users with fewer options to secure or recover their wallets. Then, when users attempt to redeem their NIGHT tokens, they are instantly swept into a so-called hacker or white-hat address. The explanation appears to be that the wallet was compromised, rather than the incident being the responsibility of SecondFi.

The wallets affected were precisely those created during the period when NIGHT wallets needed to be set up.

Only a fraction of the assets appear to have been recovered. Of the 4,500 NIGHT tokens that were instantly taken from me, I received only 40 through the recovery process. You can no longer redeem NIGHT, and when the next thaw occurs, I worry that any tokens redeemed could be immediately taken again.

I would be very interested to know whether SecondFi held any NIGHT tokens of its own.

What happens now? The people who worked with SecondFi may move on to other Cardano companies, while affected users are left trying to understand what happened to their assets.

At this point, I strongly suspect that this may have been carefully orchestrated. My concern is that NIGHT tokens were the real target — potentially removing a significant amount of the circulating supply while gaining control of tokens worth an estimated $2 million or more. Come peak bull run multiply that substantially...

The timing, the sequence of events, and the impact on NIGHT holders raise serious questions that deserve clear answers.

When you start to think of how the Night thaw was set up and the fact that secondfi was a trusted member of emurgo this starts to paint a worrying picture as a whole.

They are going to pocket your night as soon as you withdraw it... I'm surprised there is no class action yet, they are playing long game.

I can't thaw my midnight because my wallet was compromised. When will I be able to get it? When I try to it comes up with an error. Any one else have this?

Secondfi won't let me thaw midnight even on other wallets. What even is this? No update on it... Any one else can't thaw their midnight?

Hey l, just wondering what options there are? The lace interface is really bad. I can't tell what's going on with multiple wallets being connected. Sending crypto to other wallets is very clunky, doesn't tell you why a transaction can't be done, and is just very poorly done in my opinion. Moved from second fi hack.

What world are we living in.

Legal stuff on the secondfi website.

7.1.

You acknowledge that blockchain networks and smart contracts involve inherent risks, including but not limited to technical defects, vulnerabilities, forks, reorganisations, congestion, downtime, and attacks. These events may result in total or partial loss, theft, or inaccessibility of your Digital Assets or an inability to complete transactions at expected times or prices.

7.4

We do not guarantee the functionality, security, or availability of any blockchain network or smart contract, whether or not developed by us.

Odd timing with the rebrand to secondfi and the recent stuff happening on cardano. I hope no treachery or insider deception is afoot from secondfi.

I would be curious if they updated their legal framework when they rebranded to secondfi. No one read the fine print and was a way for them to tweak legal wording and have people agree to it/ accept it without thinking.

It's been like 14 hours now and no new updates. This could take them a long time to get sorted. With a situation like this and the amount of assets at risk, they will be extremely slow and methodical here. Don't expect it to be available soon. I moved all my funds to the Lace wallet for now.

Be smart and at the very least check on cardanoscan using ur wallet address and if you still don't feel comfortable, move it!

I got a theory... The emperor is being SACRIFICED psykers, 1000's of them a day just to survive. Is the emperor now a conduit of their psychic energy? We know malice loves sacrifice...

"Malice is the intention or desire to do evil, cause injury, or inflict suffering on another person. It implies a deliberate, spiteful, or ill-willed motive rather than accidental harm."

So if the emperor were to be revived from his current state what emotion would he feel seeing that some of his sons betrayed him and caused chaos for such a long time? Would he feel malice towards the existing chaos gods? Could his absorption of psychic energy amplify malice in the universe to epic proportions?

Do the grey knights know and understand this which is why they cannot let him wake? I mean what other reason would they want him to stay dormant? They also need the emperor alive to keep faith and hope alive for humanity. Is the risk of possible malice a necessary evil for the grey knights goals?

Malice left canon in the 1980's. The seed of the Horus heresy was created in the 1980's.

Was this Erebus's plan from the start? Is Erebus possessed by malice or malice himself? We know Erebus is not actually Erebus but an imposter whom killed him. Why is Erebus so hated and evil? Maybe he is the premonition of malice. The embodiment of spite towards the chaos gods using humanity as it's puppet to over throw the 4 chaos gods. Just like he used Lorgar as a puppet.

Just a thought. The grey knights know alot of secrets.

I'm not the biggest lore head but, I'm just trying to connect the possible dots here.