r/cardano

Luckily I wasn’t affected during the hack and already have all my assets on an eternal wallet I set up before the hack , do I still need to migrate anything from SecondFi ? Or am I all good ?
Tia

Hey,

I'm late to noticing the Yoroi / SecondFi transition and then more recently SecondFi being hacked.

I used the SecondFi recovery tool and my wallet was unaffected. I was able to use the migration tool to migrate wallet to a new Eternl wallet. The ADA has migrated but I do not see the Midnight asset that I previously could see in Yoroi.

When I use the redeem Midnight tool with any of the addresses from the original wallet and the new wallet it shows that no claims can be found for the addresses.

Any ideas on how I can check if I still have the Midnight tokens?

Many thanks in advance.

SecondFi incident timeline and unanswered questions regarding NIGHT holders

April 22 — Yoroi rebrands to SecondFi, updates its legal terms, and requires users to accept new agreements when downloading the new app. The company also outlines plans for future features, including debit-card-style crypto transactions.

June 23 — Approximately eight weeks later, reports emerge of wallets being compromised and assets being drained.

Shortly afterward, SecondFi announces its shutdown. The timing of these events, alongside the subsequent difficulties users have experienced recovering their assets, raises several questions that I believe deserve further clarification.

July 8th - Emurgo steps down from board

One particular concern is what happens when affected users attempt to thaw their NIGHT tokens. In my case, approximately 4,500 NIGHT tokens were transferred out almost immediately after redemption, while the recovery process returned only 40 tokens. I am concerned about whether any remaining allocation can be claimed safely and what protections, if any, are available to affected holders.

I would also like to understand the scope of the incident more clearly. Were the affected wallets predominantly created during the period when users were preparing for the NIGHT distribution? How much of the stolen or affected supply has been recovered, and what is known about the destinations of the remaining assets?

Another question I would welcome clarification on is whether SecondFi, its associated entities, or individuals involved in the project held NIGHT tokens themselves, and whether any such holdings were affected by the incident.

Given SecondFi's previous relationship with EMURGO and its role in the Cardano ecosystem, I believe transparency is particularly important. What technical findings have been established regarding the wallet compromises? What happened to the unrecovered assets? And what safeguards are available to users who still have outstanding NIGHT allocations?

I am not claiming to know what happened behind the scenes, and I am not accusing any individual or organization of wrongdoing. However, the sequence of events, the recovery outcomes, and the uncertainty surrounding future NIGHT claims leave legitimate questions unanswered.

I would appreciate a factual discussion from anyone with verifiable information, official statements, or on-chain evidence that could help clarify what happened and what affected NIGHT holders can expect going forward.

I used the link on BYDFi's ADA page to get to the Cardano developer portal, then found CIP 0113 through the portal's CIPs link. CIP 0113 was still listed as Proposed when I read it. I checked the section on third-party actions to see who it allowed to trigger them.

In the document's auto-compounding example, any user was allowed to trigger the action. It also described actions that required signatures from designated keys. Those choices were defined in each token's own implementation, which the document called a substandard. The third-party script there defined both the available actions and who, if anyone, was authorised to trigger them. So I couldn't infer a token's third-party permissions from the CIP 0113 label alone.

They are going to pocket your night as soon as you withdraw it... I'm surprised there is no class action yet, they are playing long game.

I was on yoroi for years where I connected my hardware wallet and staked, etc. I also successfully claimed my NIGHT through the portal and had that show up on my yoroi page. I really haven't been in the loop on this and was looking to claim my full allocation of NIGHT tokens after this final glacier thaw. I have been holding ADA for years but I'm my interactions with the network are very simple, just looking to stake and claim NIGHT tokens and not messing around with NFTs, etc.

Looking for suggestions with the most simple and easy user experience and not something as complicated/intricate as Daedalus for instance. I don't need a mobile app, would just be using this on my PC.

I'm also looking to maybe really start getting into the Midnight network as well, so looking for a wallet that is friendly with this.

Does anyone know how I still can get the next midnight thaw that I am due? I recovered my Yoroi wallet into a new VESPR wallet without incident, but I don't know how/if the midnight will be airdropped to it. Thanks for the help in advance.