CryptoSlate
EMURGO is stepping back from Pentad, the five-member group coordinating Cardano's infrastructure funding, to focus resources on recovering funds lost in the SecondFi wallet exploit. The attack exploited weak randomness in SecondFi's key-generation code and drained roughly $2.4 million in ADA, about 16 million ADA at recent prices, from 374 wallets. Cardano's chain processed every transaction as designed; the failure sat entirely inside SecondFi's wallet layer. Bitquery's on-chain investigation reconstructed a broader swept-funds picture above 129 million ADA, though only the 16 million ADA figure is tied to publicly identified affected users, putting the average per-wallet loss near 42,800 ADA.
Why it matters
Cardano's governance system grew up during its Voltaire era, and its entry point is the wallet itself. Yoroi's help documentation walks users through DRep delegation, abstaining, no confidence, or direct GovTool voting from inside the same wallet interface. CardanoCube's live governance hub recorded 28 active governance actions, 379 active DReps, and 3,217 votes cast over 30 days, with 87.52 billion ADA of voting power exercised in that window. A compromised wallet inside that flow is not a side-channel incident: it sits in the exact user path that now carries live treasury votes and DRep delegation. The confirmed loss is roughly 0.018% of that 30-day voting power, but the denominator is governance activity rather than total supply, and the per-user hit of 42,800 ADA is meaningful for the holders who absorbed it.
Market impact
EMURGO's exit lands inside an active funding cycle. The Cardano community approved a 70 million ADA Critical Integrations Budget in late 2025 covering stablecoins, institutional custody, cross-chain bridges, pricing oracles, and analytics. The Foundation's May 2026 update requested an additional 23 million ADA for Year 2 support across Circle USDCx, LayerZero, Pyth, Dune, and native Fireblocks integration, routed through Pentad with Input Output, EMURGO, and Midnight as co-sponsors and Intersect as administrator.
Frequently asked questions
-
How much ADA was stolen in the SecondFi exploit?
Roughly 16 million ADA, about $2.4 million at recent prices, drained from 374 wallets. Bitquery reconstructed a broader swept-funds picture above 129 million ADA, but only the 16 million ADA figure is tied to publicly identified affected users, averaging about 42,800 ADA per wallet.
-
Why did EMURGO leave Pentad after the exploit?
EMURGO said it is stepping back from its Pentad role to focus resources on recovery, migration, and an on-chain restitution process. Pentad coordinates Cardano infrastructure funding and includes Input Output, the Cardano Foundation, EMURGO, Intersect, and the Midnight Foundation.
-
How does a wallet exploit affect Cardano governance?
Yoroi's documentation routes DRep delegation, abstaining, no confidence, and direct GovTool voting through the same wallet interface. A compromised wallet sits inside the user path that now carries live treasury votes and delegation, making wallet security a governance dependency for ADA holders using wallet-based…
-
How big is the loss compared to Cardano's infrastructure budgets?
The 16 million ADA confirmed loss equals roughly 23% of the original 70 million ADA Critical Integrations Budget approved in late 2025, and roughly 70% of the 23 million ADA Critical Integrations V2 request the Foundation filed in May 2026 for Year 2 support.
-
What signals show whether Cardano governance holds up after the exploit?
CardanoCube recorded 87.52 billion ADA of voting power exercised over 30 days, 379 active DReps, and 3,217 votes cast. A bull path keeps active DReps, vote counts, and migration flows steady; a bear path thins out DRep activity, drops 30-day vote counts, and concentrates voting weight further toward large holders and…
Crypto Rank News
CoinDesk
Lookonchain
WuBlockchain
TheBlock
CoinTelegraph