SecondFi Renews Bounty Push After $16.1M Cardano Exploit
SecondFi has renewed its bounty offer to the attacker behind a $16.1 million Cardano exploit, as the team continues trying to recover 16.1 million ADA stolen in a June incident.
The validated notes show the exploit affected 374 wallets and stemmed from a key-generation vulnerability. SecondFi says it secured 129 million ADA during containment, but the stolen funds remain the focus of the recovery effort.
Security researchers at Groom Lake reportedly observed behavior resembling techniques previously linked to North Koreaโs Lazarus Group, but that attribution has not been officially confirmed. That caveat is important. Similar behavior is not proof of identity.
SecondFi has also confirmed it will not resume normal operations.
That makes this less of a comeback story and more of a recovery-and-containment story.
For more details, visit the official Support platform.
TL;DR
- SecondFi renewed its bounty offer after 16.1 million ADA was stolen.
- The exploit affected 374 wallets and involved a key-generation vulnerability.
- Lazarus-like behavior has been noted, but attribution is not confirmed.
The Key-Generation Detail Is The Core Problem
A key-generation vulnerability is one of the worst kinds of wallet or protocol failures.
โฆ Continue reading the full article at the original source below.
