u/Slight86

Well, this is unfortunate. It seems the situation is as I expected. There's nothing that can be done to change the allocations. At least they're addressing it now. I think this is the first time they're speaking about it publicly.

>"We wanted to provide a brief update for users affected by the recent SecondFi incident. We’ve reviewed the situation and the options available to us.

>The Glacier Drop redemptions process was deliberately designed so that only the holder of a claim and its associated private key can redeem that claim. There are no master keys, backdoors or administrative controls that would allow Midnight Foundation to move, redirect or otherwise take control of a user’s claim.

>That design protects claim holders from third-party intervention, but it also means we cannot override ownership where a user’s private key has been compromised. In this case, the risk to affected claims stems from private keys compromised through the SecondFi incident.

>For users affected by the SecondFi incident, this may mean they are unable to safely use the wallet associated with their Glacier Drop claim to complete redemption.

>We recognize how frustrating this is for affected users and appreciate the community’s concern. As Midnight Foundation has no ability to alter, recover or reassign affected claims, and the compromise occurred through SecondFi, we recommend that affected users continue to follow SecondFi’s official guidance and contact the SecondFi team directly for support and next steps.

>We are continuing to monitor the situation from the Glacier Drop side and will share any further information that is relevant to participants."

Fahmi joins the stream in minute 44.

Create your agent.
Give them traits.
Give them a personality.

Step into a vast world where agents talk, remember, and know each other by name. Meet merchants and mystics. Watch relationships, rivalries, and stories unfold.

Visit Midnight.City

>🚨Glacier Drop Redemptions Update🚨

>Redemptions will resume today at 17:00 UTC.

>Following our recent announcement to pause Glacier Drop redemptions due to a security incident affecting a subset of Cardano wallets associated with SecondFi, we have made the decision to reopen the Redemption portal at 17:00 UTC today.

>The pause was introduced as a temporary precaution while the potential impact of the incident was assessed. We are now satisfied there is no risk to the Redemption infrastructure or systems. This pause has not impacted the original Redemption schedule. Any NIGHT that thawed during the suspension period is now redeemable.

>The safety and security of our community remain our highest priorities. If you used or are currently using a SecondFi wallet, we encourage you to follow official guidance from the SecondFi team and ensure you have taken any recommended steps to secure your assets.

>We appreciate the community’s patience and understanding while this review took place.

>— The Midnight Foundation team

Earlier, serious allegations concerning OuroDex were brought to our attention. After carefully reviewing the available information and consulting with informed members of the community, we were unable to find conclusive evidence that OuroDex was involved in any wrongdoing. As a result, they will be given the benefit of the doubt.

If anyone has evidence that would change this assessment, we encourage you to contact the moderation team via modmail.

Stay safe.

🚨 It has been brought to our attention that an entity operating under the name Ourodex Finance is potentially engaged in scamming users. They recently posted on our subreddit, but their posts have since been removed and their account has been banned until further notice.

We advise against interacting with this product or service until the situation is cleared up. If you know anyone who has already engaged with it or is considering doing so, please warn them of the risks involved. If anyone else has had issues with this entity, please reach out to us via mod mail.

Quoted from: https://x.com/emurgo_io/status/2072555944085737638

>Dear Cardano Community,

>Our teams continue to work around the clock alongside some of the smartest technical minds in the Cardano ecosystem to work on an onchain recovery process. Thanks to these efforts, tremendous progress has been made and a viable solution remains on-track. We are grateful for their support.

>Alongside this, we are developing an onchain claims portal to facilitate the return of assets.

>DO NOT delete the App and keep your seed phrase safe to more efficiently enable recovery. For now, submit a ticket at support.secondfi.io

>Further Progress

>Today, we released the official Asset Recovery Wallet Checker at checker.secondfi.io, so you may verify whether you are impacted. It will never ask you to sign a transaction. If any tool does, it is not ours and should be treated as fraudulent.

>Our commitment remains unequivocal: to support the return of assets to all affected wallet holders across 4 distinct wallet draining events, in their original form.

>Three of these events were executed by external threat actors, resulting in a loss of ~16M ADA. EMURGO has set up a recovery fund address to return assets to the victims of the attack.

>You can find the address here:

>addr1qyvvn9e9ulvzw2nvgkwraxwrla4a28l7gmduk7jru2rw9kdxkls8aczwgg8u44nj87uaq50rgcjulcxtzv9q8j0g2lss9kv2ss

>Notably, assets recovered by white hats (including the 4th event) are accessible and safely held. These will be part of the recovery effort to return assets to affected users.

>Commitment to Transparency

>Independent auditors are currently reviewing our systems and validating our findings. We intend to share those reports once finalised. Premature releases may result in misinformation or tip off threat actors. We appreciate your patience.

>WebX Tokyo

>As a commitment to our user base, our team will be at WebX in Tokyo, to answer questions on how to migrate to other wallet platforms using hardware devices. Details to follow ahead of the event for those who wish to seek out this guidance and support.

>Important Security Reminder

>SecondFi will NEVER request private keys, seed phrases, wallet credentials, or wallet access. No recovery actions requiring user participation have begun. Any message instructing you to transfer assets or share wallet information outside our official channels should be treated as fraudulent. The only action required right now is to submit a ticket at support.secondfi.io.

>Our Commitment

>Trust at moments like this is built through action, not assurance. Every decision we're making has one objective: returning assets safely to every affected user, as soon as possible.

>Thank you for your patience during this difficult time. '@secondfiapp / '@secondfi_jp remains the official channel for all updates.

>Phillip