June 26, 2026 • 15 mins
Update on the SecondFi wallet exposure situation, including the latest official response, wallet safety guidance, recovery options, and the community tools being used to check whether a Cardano wallet may have been exposed.
Key takeaways:
- SecondFi says affected wallets should be treated as permanently compromised.
- Hardware wallets were not exposed in the same way as the affected hot-wallet flow.
- Users should avoid panic-moving funds from compromised wallets without understanding reward, staking, and native asset edge cases.
- SecondFi support is collecting affected-user details through its official support portal.
- Community tools can help check wallet exposure and build safer transactions to a clean wallet.
- Never share a seed phrase with any support site, app, or person.
Chapters:
0:00 SecondFi Exposure Update
1:40 What SecondFi Reported
3:46 Recovery Fund And Legal Action
4:29 Permanently Compromised Wallets
5:23 Proving Wallet Ownership
8:21 Official Support Steps
9:18 Why Moving Assets Is Risky
11:17 Safe Wallet Check Tool
12:50 Move To A New Lace Wallet
14:11 Impact And Wrap Up
References:
• EMURGO statement: https://link.learncardano.io/WKofNg
• Phil UPLC wallet tool thread: https://link.learncardano.io/4ZIT4y
• Wallet Exposure Check: https://link.learncardano.io/f4yw1C
• Peter update thread: https://link.learncardano.io/LGnc8Z
• SecondFi Support: https://link.learncardano.io/QOJQY6
• Community technical notes: https://link.learncardano.io/K8ZqVN
Disclaimer: This content is for educational purposes only. Nothing constitutes financial advice.
DISCLAIMER: This content is for informational and educational purposes only and is not financial, investment, or legal advice. I am not affiliated with, nor compensated by, the project discussed—no tokens, payments, or incentives received. I do not hold a stake in the project, including private or future allocations. All views are my own, based on public information. Always do your own research and consult a licensed advisor before investing. Crypto investments carry high risk, and past performance is no guarantee of future results. I am not responsible for any decisions you make based on this content.
🔗 https://www.youtube.com/watch?v=Fq8FhvxET2k
Subscribe to the audio podcast:
🔗 https://bit.ly/learncardano-spotify
🔗 https://apple.co/3jEPM8C
🔗 https://learncardano.io/
Follow on Social:
🔗 https://x.com/learncardano
🔗 https://facebook.com/learncardano
Key takeaways:
- SecondFi says affected wallets should be treated as permanently compromised.
- Hardware wallets were not exposed in the same way as the affected hot-wallet flow.
- Users should avoid panic-moving funds from compromised wallets without understanding reward, staking, and native asset edge cases.
- SecondFi support is collecting affected-user details through its official support portal.
- Community tools can help check wallet exposure and build safer transactions to a clean wallet.
- Never share a seed phrase with any support site, app, or person.
Chapters:
0:00 SecondFi Exposure Update
1:40 What SecondFi Reported
3:46 Recovery Fund And Legal Action
4:29 Permanently Compromised Wallets
5:23 Proving Wallet Ownership
8:21 Official Support Steps
9:18 Why Moving Assets Is Risky
11:17 Safe Wallet Check Tool
12:50 Move To A New Lace Wallet
14:11 Impact And Wrap Up
References:
• EMURGO statement: https://link.learncardano.io/WKofNg
• Phil UPLC wallet tool thread: https://link.learncardano.io/4ZIT4y
• Wallet Exposure Check: https://link.learncardano.io/f4yw1C
• Peter update thread: https://link.learncardano.io/LGnc8Z
• SecondFi Support: https://link.learncardano.io/QOJQY6
• Community technical notes: https://link.learncardano.io/K8ZqVN
Disclaimer: This content is for educational purposes only. Nothing constitutes financial advice.
DISCLAIMER: This content is for informational and educational purposes only and is not financial, investment, or legal advice. I am not affiliated with, nor compensated by, the project discussed—no tokens, payments, or incentives received. I do not hold a stake in the project, including private or future allocations. All views are my own, based on public information. Always do your own research and consult a licensed advisor before investing. Crypto investments carry high risk, and past performance is no guarantee of future results. I am not responsible for any decisions you make based on this content.
🔗 https://www.youtube.com/watch?v=Fq8FhvxET2k
Subscribe to the audio podcast:
🔗 https://bit.ly/learncardano-spotify
🔗 https://apple.co/3jEPM8C
🔗 https://learncardano.io/
Follow on Social:
🔗 https://x.com/learncardano
🔗 https://facebook.com/learncardano
Listen
Watch
Mark as Played
Transcript
Episode Transcript
Available transcripts are automatically generated. Complete accuracy is not guaranteed.
Speaker 1 (00:00):
Okay, I've got an update around the second fire situation
and how to possibly mitigate any more risk of exposure
in this wallet harvesting event. I think that's the best
way to describe it. We've got official statements coming out
from Americo and also really good ways of actually going
through and clearing up your wallet to firstly check if
(00:22):
your wallet has been exposed to this vulnerability, and then
also getting your assets out of that situation in a nice,
cleaned way before potential hackers those harvesters see your transaction
online and actually take things out. So let me go
through all of these details, explain exactly what's going on,
and give you guys all a big update. So a
(00:44):
lot has happened over the last twenty four hours, a
lot of people have been working on a solution for
all this, and if you have been just sitting there
waiting and not exposing your wallet online with the transaction,
then you should be okay. But let's go through the
d tells here to see what we can do next
and what has happened if your assets have been drained
(01:06):
without you even entering into your app or anything like that.
So this is specifically for second five, the second five
wallet and Control wallet, which Second five bought, and this
is from the EUROI and Amergo ecosystem. So for those
that don't know, if you're using a hardware wallet such
as a Keystone wallet, one of these hardware devices, or
(01:29):
a legend nano, you're okay if you don't have one
of those links down below my show notes, so you
can actually purchase one and secure your assets. It's highly
advisable that you do it now.
Speaker 2 (01:41):
Okay.
Speaker 1 (01:41):
Now Second five have put out various statements here, but overall,
sixteen million eight was lost during the vulnerability this hack attempt,
and roughly about two point four million worth of assets,
so two point four million was taken from a Candano ecosystem.
In comparison, just as compared this morning, only polymarket suffered
(02:03):
a three million front end exploit from a supply chain attack.
This means someone injected some code that the front end
of the website depended on. So when you build a website,
you have the website front end, but then you may
have pieces that you borrow from open source libraries or
someone something that someone else built, and somewhere along those lines,
something was hacked, something was vulnerable. It had some code
(02:27):
that allowed a hacker to inject into it, and when
they saw that their code was being deployed onto Polymarket,
they executed their code and drained all the assets from Polymarket.
That's a supply chain attack. That's not what happened here
with America and Second Fight. So their official statement did
come out, and they detailed a whole bunch of things
in regards to what has happened and what they're doing
(02:49):
at the moment. And let me just highlight a couple
of things. We know how much was taken, and this
is the exact amount that the hacker took themselves. There
was an additional one hundred and twenty nine million which
the team there did in regards to withdrawing everything that
they knew was exposed within the ecosystem and then storing
(03:09):
it to a third party holder that was looking after
all those assets while they sought out this mess and
be able to return everything to their rightful owners. If
they didn't do this step, this potential hacker here that
got the sixteen million eight and started swapping it for
a USDCX would have had their hands on one hundred
and twenty nine million eventually and then taken all of
(03:31):
that as well. So this was a preventative asset protection
response from the second five team to be able to
look after and take hold of those assets while they
work out a plan to get things back in order.
And I will go into how they're going to identify
everyone's wallet so they can get all these assets back.
Speaker 2 (03:53):
So to support this.
Speaker 1 (03:54):
Process, a dedicated, an independently secured restoration fund has been
has already been established, forming the foundation of a transparent
reimbursement process for affected users, so you will get your
assets back. For those users that weren't a part of
this initial sixteen million, maybe they'll get some funds together
and reimburse people with that lost to sixteen million as well.
(04:18):
I'm not too sure about those details yet, but recovery
is in process. So in parallel, they have also submitted
this to the legal authorities as well, so there will
be legal action taken where they can. Now the wallet's here,
this is a critical notice that they put out. Wallets
compromised during this incidance should be treated as permanently compromised.
(04:40):
So if you had your wallet within second five and
we're using it, consider it compromise. You need to start
completely new wallets highly recommend you get our hardware wallet
at this point in time. So for this reason, affected
users must not independently move assets, restore seed phrases, or
attempt to migrate compromise wallets to another Codano wallet application,
because if you use the same seed phrase that was
(05:02):
compromised in second five to another wallet, it is still compromised.
That's the whole point here. But there are ways around this,
and I'll talk about moving your assets in a moment too.
There have been some clarity with that, so that's where
we're at. That's official statement links down below for you
guys who can go through it and get a deeper
read through it. But I pulled out the highlights for
(05:24):
you all. Now, what about identifying your wallet to be
able to get your assets back? There's all talk about
in the comments in my previous video of people just
like freaking out, going how the hell are they going
to work out which seed phrase, which wallet had, what assets,
and how we're going to send that back. You can
(05:45):
do this or within code, and this is the beauty
of blockchain. You can see everything on chain and you
can map things backwards as long as you can verify
that you own that original wallet, and this is what
Sebastian has come up with a couple of ideas that
have been put around. So Sebastian was one of the
original engineers that worked on EUROI about six seven years
(06:09):
ago before starting up his own thing, and now he
is the CTO of Midnight. For those that don't know him,
he has been an OG in the space and an
absolutely brilliant technical mind. This is what he said. Are
two particular ways of being able to prove that the
wallet is belonging to a particular person. First off, zkproofs,
(06:31):
and this is a really good one, so you can
prove you know the seed phrase without revealing it. And
this works even if private keys have been compromised as
long as the seed phrase hasn't been leaked online. And
this is the case with second five. The seed frase
wasn't leaked, it just wasn't secured in that signing transaction.
So that's a good thing. So we may be seeing
(06:56):
an application that is being built using zkproofs, which is
a brilliant the technology really where you can sign a
message on chain to say that yes, I am the
owner of this wallet that's got compromised. And this is
where I want my assets to be restored to, and
because you can sign that with your original wallet, the
(07:18):
hacker can't do that because they don't have the seed phrase.
You can sign that with the original wallet, tell it
where to go, and then they can send those assets
and funds back to you. But that's really good. That's
a brilliant way of doing it. The other way is
the way that Kadano's wallets work with wallet hierarchy. So
wallets derives many different keys from a master key, you
can prove ownership by signing with a high level account
(07:40):
key instead of elite address key. So that's just how
kadano wallet's work.
Speaker 2 (07:45):
They do it.
Speaker 1 (07:46):
They've got like a state key, a signing key, you
got to de rep key, you got all these different
types of keys within the wallet itself, and they can
use the higher level key, the master key, the original key,
to go through and sign and prove that you own
the wallet as well. So that's another way of doing it.
I like the zkproofside of things. It's a really nice
(08:07):
use case for midnight as well. So we'll see how
this one goes, but there are definitely nice ways of
being able to identify who owned what within that massive
wallet that owns and is holding everyone's assets at the moment.
Speaker 2 (08:24):
So that's that's really good to note.
Speaker 1 (08:26):
Now, please do follow second five the account for more
up to date information. Like I said, this is a
continuously developing and emerging, growing and evolving story, so please
second please follow the second five X account for all
the information. If if your wallet has been compromised, go
(08:48):
to their support dot second five dot io website.
Speaker 2 (08:52):
This is what it looks like here.
Speaker 1 (08:54):
Make sure you're on the right address support dot second
five dot io. That's the website, sign up with the
email address and submit a ticket to say that you're
one of the compromise wallets. You may be asked for
some address details, etcetera, etcetera. Never put your seed phrase online.
Don't send them your seed phrase for example, so just
(09:17):
be aware of that. Now, there are some nuances in
regards to how people are trying to move their assets
off the particular wallet at the moment, and because there
are so many edge cases, that's why some people are
saying don't move all your assets right now. We know
(09:37):
that if you move your assets and you stuff something
up in a panic, then you were exposed that signing
key on chain and allow the hacker to harvest your
the rest of your assets. So, for example, if you
were trying to move all your assets on chain and
you could only move half of them in one transaction
for whatever reason, then the hacker would see that you
(09:57):
only moved half and they come in and take the
rest of it. So that's what the type of situations
and edge cases that they were trying to avoid. So
sitting tight and doing nothing kind of saved you because
it didn't expose your key on chain. The pie here
mentions all these different edge cases. For example, some wallets
will automatically withdraw staking rewards as part of part of
(10:18):
your first transaction and return them to your wallet instead
of sending them to the other wallet. So there's little
things like that, And if you're panicking, you only send
your aida. Your native assets be returned as change. So
there's lots of different scenarios where you could have stuffed
things up, especially with your staking rewards. So sometimes people
(10:38):
don't claim their staking rewards for a year or something
like that, and it's still locked in that staking rewards
area and they won't come out until you do a
transaction or withdraw them directly. And if you don't and
you move all your aida across and let's say you
move a ten thousand and eight over, you might have
two or three thousand and eight and rewards still stuck
(10:59):
in your wallet and it gets return to that wallet.
The hacker will see that and then take that eight away.
Speaker 2 (11:03):
So they didn't.
Speaker 1 (11:04):
Want anyone to have anything left over within their wallet
that the hacker could take away and swap then you know, liquidate.
Speaker 2 (11:13):
So that's what they were trying to avoid.
Speaker 1 (11:14):
So hence there are a lot of people saying, leave
your assets in your wallet, don't touch them at all.
Now Phil here wrote an app. He wrote it. He
was putting a lot of comments out about, you know,
don't don't.
Speaker 2 (11:30):
Move your assets, et cetera.
Speaker 1 (11:31):
So he's one of these people, and it kind of
makes sense now that things were finally explained and I
kind of get it now. But he built this app.
Here is my Cadano seyfu. This is it here And
what you can do with this one is essentially it
connects your wallet here, so depending on what you are using.
(11:52):
I don't use EUROI or second five thankfully, so I
hadn't been exposed and my wallets are or behind hardware
wallets as well. So I'm completely safe. I didn't risk
any exposure here. But you can connect your wallet whatever
it might be and run a wallet check and this
will see if your address was potentially a part of
(12:17):
this exposed risk with second five, So run your wallets
through this here. It will just check the wallet address
to see if it had been in the pool of
wallets that had been exposed, and if it had, then
what you can do is use fills get me out
of here tool which will do the complete transaction, which
(12:39):
will withdraw all of your rewards, de register your staking
and everything else. It takes care of all those edge
cases and will then send everything to a brand new address.
So follow the instructions here. I'll just talk you through
it quickly. So first off, create a brand new wallet
within Lace. So they're pushing lace wallet here, and this
(13:01):
regards lace Wallet is open source so it has been
audited by the community as well, so I think that's
why Phil is suggesting Lace. But create a brand new,
completely brand new wallet within Lace. Paste the receiving address
in here, so you're not connecting your brand new wallet
to this app. You're just saying this is where I
(13:22):
want my assets to go paste that in here and
then you'll be able to hit that get me out
of here. It was create a brand new transaction that
will send all your assets out, So thank you Phil
for building that. Other people have checked out this app
as well and have given it the thumbs up. So
a lot of other smart people have said that, yes,
(13:44):
this is good, It's done correctly, So I'm trusting this
one here myself as well. Thankfully, I wasn't exposed to
any of this here myself, but there were other people
that are a part of my state pull, people delegating
to me and whatnot that have been exposed. And I
(14:04):
really hope that all of you guys out there can
recover from this. For sure, the reputational damage for a
murgo and second five as astronomical. You know, in the
grand scheme of things, this vulnerability, this hack is still
tiny compared to all of the other hacks in the
(14:25):
DeFi space and cryptospace in general.
Speaker 2 (14:28):
It is still fairly small.
Speaker 1 (14:29):
I know people are hurting and saying, hey, I've just
lost all my life savings here.
Speaker 2 (14:34):
I get that.
Speaker 1 (14:34):
I understand that, and I really hope you guys recover
from all this as well. But anyway, guys, if this
was helpful, if you got something out of this, hit
the thumbs up, like subscribe notification bell I've got YouTube
memberships down below. Supporting the channel is really appreciated. Buy
me a coffee links there as well, a great way
(14:54):
to support the channel. And of course, like always, guys,
try and stay positive. I'll bring you some sort of
the news next week. I promise I'll see you in
the next video. M h m hmm.
Okay, I've got an update around the second fire situation
and how to possibly mitigate any more risk of exposure
in this wallet harvesting event. I think that's the best
way to describe it. We've got official statements coming out
from Americo and also really good ways of actually going
through and clearing up your wallet to firstly check if
(00:22):
your wallet has been exposed to this vulnerability, and then
also getting your assets out of that situation in a nice,
cleaned way before potential hackers those harvesters see your transaction
online and actually take things out. So let me go
through all of these details, explain exactly what's going on,
and give you guys all a big update. So a
(00:44):
lot has happened over the last twenty four hours, a
lot of people have been working on a solution for
all this, and if you have been just sitting there
waiting and not exposing your wallet online with the transaction,
then you should be okay. But let's go through the
d tells here to see what we can do next
and what has happened if your assets have been drained
(01:06):
without you even entering into your app or anything like that.
So this is specifically for second five, the second five
wallet and Control wallet, which Second five bought, and this
is from the EUROI and Amergo ecosystem. So for those
that don't know, if you're using a hardware wallet such
as a Keystone wallet, one of these hardware devices, or
(01:29):
a legend nano, you're okay if you don't have one
of those links down below my show notes, so you
can actually purchase one and secure your assets. It's highly
advisable that you do it now.
Speaker 2 (01:41):
Okay.
Speaker 1 (01:41):
Now Second five have put out various statements here, but overall,
sixteen million eight was lost during the vulnerability this hack attempt,
and roughly about two point four million worth of assets,
so two point four million was taken from a Candano ecosystem.
In comparison, just as compared this morning, only polymarket suffered
(02:03):
a three million front end exploit from a supply chain attack.
This means someone injected some code that the front end
of the website depended on. So when you build a website,
you have the website front end, but then you may
have pieces that you borrow from open source libraries or
someone something that someone else built, and somewhere along those lines,
something was hacked, something was vulnerable. It had some code
(02:27):
that allowed a hacker to inject into it, and when
they saw that their code was being deployed onto Polymarket,
they executed their code and drained all the assets from Polymarket.
That's a supply chain attack. That's not what happened here
with America and Second Fight. So their official statement did
come out, and they detailed a whole bunch of things
in regards to what has happened and what they're doing
(02:49):
at the moment. And let me just highlight a couple
of things. We know how much was taken, and this
is the exact amount that the hacker took themselves. There
was an additional one hundred and twenty nine million which
the team there did in regards to withdrawing everything that
they knew was exposed within the ecosystem and then storing
(03:09):
it to a third party holder that was looking after
all those assets while they sought out this mess and
be able to return everything to their rightful owners. If
they didn't do this step, this potential hacker here that
got the sixteen million eight and started swapping it for
a USDCX would have had their hands on one hundred
and twenty nine million eventually and then taken all of
(03:31):
that as well. So this was a preventative asset protection
response from the second five team to be able to
look after and take hold of those assets while they
work out a plan to get things back in order.
And I will go into how they're going to identify
everyone's wallet so they can get all these assets back.
Speaker 2 (03:53):
So to support this.
Speaker 1 (03:54):
Process, a dedicated, an independently secured restoration fund has been
has already been established, forming the foundation of a transparent
reimbursement process for affected users, so you will get your
assets back. For those users that weren't a part of
this initial sixteen million, maybe they'll get some funds together
and reimburse people with that lost to sixteen million as well.
(04:18):
I'm not too sure about those details yet, but recovery
is in process. So in parallel, they have also submitted
this to the legal authorities as well, so there will
be legal action taken where they can. Now the wallet's here,
this is a critical notice that they put out. Wallets
compromised during this incidance should be treated as permanently compromised.
(04:40):
So if you had your wallet within second five and
we're using it, consider it compromise. You need to start
completely new wallets highly recommend you get our hardware wallet
at this point in time. So for this reason, affected
users must not independently move assets, restore seed phrases, or
attempt to migrate compromise wallets to another Codano wallet application,
because if you use the same seed phrase that was
(05:02):
compromised in second five to another wallet, it is still compromised.
That's the whole point here. But there are ways around this,
and I'll talk about moving your assets in a moment too.
There have been some clarity with that, so that's where
we're at. That's official statement links down below for you
guys who can go through it and get a deeper
read through it. But I pulled out the highlights for
(05:24):
you all. Now, what about identifying your wallet to be
able to get your assets back? There's all talk about
in the comments in my previous video of people just
like freaking out, going how the hell are they going
to work out which seed phrase, which wallet had, what assets,
and how we're going to send that back. You can
(05:45):
do this or within code, and this is the beauty
of blockchain. You can see everything on chain and you
can map things backwards as long as you can verify
that you own that original wallet, and this is what
Sebastian has come up with a couple of ideas that
have been put around. So Sebastian was one of the
original engineers that worked on EUROI about six seven years
(06:09):
ago before starting up his own thing, and now he
is the CTO of Midnight. For those that don't know him,
he has been an OG in the space and an
absolutely brilliant technical mind. This is what he said. Are
two particular ways of being able to prove that the
wallet is belonging to a particular person. First off, zkproofs,
(06:31):
and this is a really good one, so you can
prove you know the seed phrase without revealing it. And
this works even if private keys have been compromised as
long as the seed phrase hasn't been leaked online. And
this is the case with second five. The seed frase
wasn't leaked, it just wasn't secured in that signing transaction.
So that's a good thing. So we may be seeing
(06:56):
an application that is being built using zkproofs, which is
a brilliant the technology really where you can sign a
message on chain to say that yes, I am the
owner of this wallet that's got compromised. And this is
where I want my assets to be restored to, and
because you can sign that with your original wallet, the
(07:18):
hacker can't do that because they don't have the seed phrase.
You can sign that with the original wallet, tell it
where to go, and then they can send those assets
and funds back to you. But that's really good. That's
a brilliant way of doing it. The other way is
the way that Kadano's wallets work with wallet hierarchy. So
wallets derives many different keys from a master key, you
can prove ownership by signing with a high level account
(07:40):
key instead of elite address key. So that's just how
kadano wallet's work.
Speaker 2 (07:45):
They do it.
Speaker 1 (07:46):
They've got like a state key, a signing key, you
got to de rep key, you got all these different
types of keys within the wallet itself, and they can
use the higher level key, the master key, the original key,
to go through and sign and prove that you own
the wallet as well. So that's another way of doing it.
I like the zkproofside of things. It's a really nice
(08:07):
use case for midnight as well. So we'll see how
this one goes, but there are definitely nice ways of
being able to identify who owned what within that massive
wallet that owns and is holding everyone's assets at the moment.
Speaker 2 (08:24):
So that's that's really good to note.
Speaker 1 (08:26):
Now, please do follow second five the account for more
up to date information. Like I said, this is a
continuously developing and emerging, growing and evolving story, so please
second please follow the second five X account for all
the information. If if your wallet has been compromised, go
(08:48):
to their support dot second five dot io website.
Speaker 2 (08:52):
This is what it looks like here.
Speaker 1 (08:54):
Make sure you're on the right address support dot second
five dot io. That's the website, sign up with the
email address and submit a ticket to say that you're
one of the compromise wallets. You may be asked for
some address details, etcetera, etcetera. Never put your seed phrase online.
Don't send them your seed phrase for example, so just
(09:17):
be aware of that. Now, there are some nuances in
regards to how people are trying to move their assets
off the particular wallet at the moment, and because there
are so many edge cases, that's why some people are
saying don't move all your assets right now. We know
(09:37):
that if you move your assets and you stuff something
up in a panic, then you were exposed that signing
key on chain and allow the hacker to harvest your
the rest of your assets. So, for example, if you
were trying to move all your assets on chain and
you could only move half of them in one transaction
for whatever reason, then the hacker would see that you
(09:57):
only moved half and they come in and take the
rest of it. So that's what the type of situations
and edge cases that they were trying to avoid. So
sitting tight and doing nothing kind of saved you because
it didn't expose your key on chain. The pie here
mentions all these different edge cases. For example, some wallets
will automatically withdraw staking rewards as part of part of
(10:18):
your first transaction and return them to your wallet instead
of sending them to the other wallet. So there's little
things like that, And if you're panicking, you only send
your aida. Your native assets be returned as change. So
there's lots of different scenarios where you could have stuffed
things up, especially with your staking rewards. So sometimes people
(10:38):
don't claim their staking rewards for a year or something
like that, and it's still locked in that staking rewards
area and they won't come out until you do a
transaction or withdraw them directly. And if you don't and
you move all your aida across and let's say you
move a ten thousand and eight over, you might have
two or three thousand and eight and rewards still stuck
(10:59):
in your wallet and it gets return to that wallet.
The hacker will see that and then take that eight away.
Speaker 2 (11:03):
So they didn't.
Speaker 1 (11:04):
Want anyone to have anything left over within their wallet
that the hacker could take away and swap then you know, liquidate.
Speaker 2 (11:13):
So that's what they were trying to avoid.
Speaker 1 (11:14):
So hence there are a lot of people saying, leave
your assets in your wallet, don't touch them at all.
Now Phil here wrote an app. He wrote it. He
was putting a lot of comments out about, you know,
don't don't.
Speaker 2 (11:30):
Move your assets, et cetera.
Speaker 1 (11:31):
So he's one of these people, and it kind of
makes sense now that things were finally explained and I
kind of get it now. But he built this app.
Here is my Cadano seyfu. This is it here And
what you can do with this one is essentially it
connects your wallet here, so depending on what you are using.
(11:52):
I don't use EUROI or second five thankfully, so I
hadn't been exposed and my wallets are or behind hardware
wallets as well. So I'm completely safe. I didn't risk
any exposure here. But you can connect your wallet whatever
it might be and run a wallet check and this
will see if your address was potentially a part of
(12:17):
this exposed risk with second five, So run your wallets
through this here. It will just check the wallet address
to see if it had been in the pool of
wallets that had been exposed, and if it had, then
what you can do is use fills get me out
of here tool which will do the complete transaction, which
(12:39):
will withdraw all of your rewards, de register your staking
and everything else. It takes care of all those edge
cases and will then send everything to a brand new address.
So follow the instructions here. I'll just talk you through
it quickly. So first off, create a brand new wallet
within Lace. So they're pushing lace wallet here, and this
(13:01):
regards lace Wallet is open source so it has been
audited by the community as well, so I think that's
why Phil is suggesting Lace. But create a brand new,
completely brand new wallet within Lace. Paste the receiving address
in here, so you're not connecting your brand new wallet
to this app. You're just saying this is where I
(13:22):
want my assets to go paste that in here and
then you'll be able to hit that get me out
of here. It was create a brand new transaction that
will send all your assets out, So thank you Phil
for building that. Other people have checked out this app
as well and have given it the thumbs up. So
a lot of other smart people have said that, yes,
(13:44):
this is good, It's done correctly, So I'm trusting this
one here myself as well. Thankfully, I wasn't exposed to
any of this here myself, but there were other people
that are a part of my state pull, people delegating
to me and whatnot that have been exposed. And I
(14:04):
really hope that all of you guys out there can
recover from this. For sure, the reputational damage for a
murgo and second five as astronomical. You know, in the
grand scheme of things, this vulnerability, this hack is still
tiny compared to all of the other hacks in the
(14:25):
DeFi space and cryptospace in general.
Speaker 2 (14:28):
It is still fairly small.
Speaker 1 (14:29):
I know people are hurting and saying, hey, I've just
lost all my life savings here.
Speaker 2 (14:34):
I get that.
Speaker 1 (14:34):
I understand that, and I really hope you guys recover
from all this as well. But anyway, guys, if this
was helpful, if you got something out of this, hit
the thumbs up, like subscribe notification bell I've got YouTube
memberships down below. Supporting the channel is really appreciated. Buy
me a coffee links there as well, a great way
(14:54):
to support the channel. And of course, like always, guys,
try and stay positive. I'll bring you some sort of
the news next week. I promise I'll see you in
the next video. M h m hmm.
Popular Podcasts
Stuff You Should Know
If you've ever wanted to know about champagne, satanism, the Stonewall Uprising, chaos theory, LSD, El Nino, true crime and Rosa Parks, then look no further. Josh and Chuck have you covered.
Dateline NBC
Current and classic episodes, featuring compelling true-crime mysteries, powerful documentaries and in-depth investigations. Follow now to get the latest episodes of Dateline NBC completely free, or subscribe to Dateline Premium for ad-free listening and exclusive bonus content: DatelinePremium.com
The Breakfast Club
The World's Most Dangerous Morning Show, The Breakfast Club, With DJ Envy, Jess Hilarious, And Charlamagne Tha God!