SecondFi, a Cardano wallet, announced a recovery plan expected to begin within two weeks after a security breach that exposed roughly 16 million ADA (about $2.4 million) from 374 addresses. The breach, discovered on Tuesday, stemmed from a software flaw that exposed private keys. The company secured about 129 million ADA and transferred the funds to an independent custodian while verification and recovery continue. CEO Phillip Pon said forensic analysis was completed and a recovery pathway was designed around existing wallet states; the next week will be spent building the solution, followed by another week of testing before assets are returned. Users were urged not to migrate assets or take actions outside official guidance, as independent steps could hinder the secure return. Emurgo noted that no comprehensive post‑mortem has been released. A separate warning highlighted fraudulent messages impersonating the wallet; the company said recovery actions have not started and that it will never request private keys, seed phrases, or wallet credentials. Users requiring assistance should submit tickets through the official support portal while the recovery process continues.