Users of the Cardano wallet SecondFi (formerly Yoroi) have lost a cumulative 16 million ADA (~$2.4 million) across three attacks targeting a vulnerability in the project’s wallet generation code.
After the attacks commenced, SecondFi “rescued” another 129 million ADA (~$19.4 million) by moving the assets to a third party entity. They announced that an external accounting firm would verify the funds and process user claims.
About a month after the hack, SecondFi announced it would shut down operations.