The SecondFi (formerly Yoroi) incident — your stake is safe

If you delegate to ADAvault, your stake is unaffected by the security incident at SecondFi, the wallet formerly known as Yoroi. Delegation is non-custodial: your keys never leave your wallet, and a pool never holds or can touch your ADA. Rewards continue as normal.

This is a wallet problem, not a staking one. SecondFi disclosed a flaw that exposed users’ private keys; EMURGO, which built it, reports 374 affected addresses and around 16 million ADA compromised, with a much larger sum secured into a recovery fund while the investigation continues.

If you used the Yoroi or SecondFi wallet, follow EMURGO’s official guidance through @secondfiapp, and only that. Their notice is clear: affected wallets should be treated as permanently compromised, and users should not independently move assets or restore their recovery phrase elsewhere while the official recovery process is prepared.

Take particular care now. An incident like this draws scammers impersonating support, “wallet checkers”, and fake recovery portals. EMURGO and SecondFi will not DM you, and no legitimate recovery will ever ask for your recovery phrase. Verify every link through the official channel before you act.

If you stake from any other wallet — Lace, Eternl, Vespr, a hardware wallet — this flaw doesn’t affect you.