SecondFi warns users not to claim NIGHT tokens from compromised wallets

cryptonews

Sep 21

SecondFi has warned holders of compromised wallets not to redeem upcoming NIGHT allocations after confirming that Midnight’s claim system requires tokens to be claimed through the original wallet ...

Source Link

Disclaimer: Investing carries risk. This is not financial advice. The above content should not be regarded as an offer, recommendation, or solicitation on acquiring or disposing of any financial products, any associated discussions, comments, or posts by author or other users should not be considered as such either. It is solely for general information purpose only, which does not consider your own investment objectives, financial situations or needs. TTM assumes no responsibility or warranty for the accuracy and completeness of the information, investors should do their own research and may seek professional advice before investing.

Most Discussed

{"basename":"","ssrTDKData":{"titleTemplate":"%s - Tiger Brokers","title":"Tiger Brokers | Global Stocks, Options & Futures Trading App","description":"Tiger Brokers, one-stop investment in US stocks, SGX stocks, HK stocks, A-shares & other global assets. One of the best stock trading platforms in Singapore.","keywords":"tiger brokers,tiger trade,tiger brokers singapore,broker online,stock trading in singapore,share trading singapore,brokerage firm singapore,trading app,stock broker singapore,stock trading platforms,trading account","social":{"ogDescription":"Tiger Brokers, one-stop investment in US stocks, SGX stocks, HK stocks, A-shares & other global assets. One of the best stock trading platforms in Singapore.","ogImage":"https://c1.itigergrowtha.com/portal5/static/media/og-logo.0a0bd8dc.png","ogUrl":"https://www.itiger.com/news/2669542271"},"companyName":"Tiger Brokers"},"pageData":{"isMobile":false,"isTiger":false,"isTTM":true,"region":"SGP","license":"TBSG","edition":"fundamental"},"isCrawlerRequest":true,"__swrFallback__":{"@#url:\"https://stock-news.skytigris.cn/v3/news\",params:#id:\"2669542271\",edition:\"fundamental\",auth_exemption:1,,,undefined,":{"share":"https://ttm.financial/m/news/2669542271?lang=en_US&edition=fundamental","thumbnail":"","is_english":true,"pubTime":"2026-09-21 17:43","share_image_url":"https://static.laohu8.com/e9f99090a1c2ed51c021029395664489","id":"2669542271","market":"sg","top_or_hot":-1,"title":"SecondFi warns users not to claim NIGHT tokens from compromised wallets","media":"cryptonews","content":"<div>\n<p>SecondFi has warned holders of compromised wallets not to redeem upcoming NIGHT allocations after confirming that Midnight’s claim system requires tokens to be claimed through the original wallet ...</p>\n\n<a href=\"https://crypto.news/secondfi-warns-users-not-to-claim-night-tokens-from-compromised-wallets/\">Source Link</a>\n\n</div>\n","source":"crypto_news_highlight","html":"<!DOCTYPE html>\n<html>\n<head>\n<meta http-equiv=\"Content-Type\" content=\"text/html; charset=utf-8\" />\n<meta name=\"viewport\" content=\"width=device-width,initial-scale=1.0,minimum-scale=1.0,maximum-scale=1.0,user-scalable=no\"/>\n<meta name=\"format-detection\" content=\"telephone=no,email=no,address=no\" />\n<title>SecondFi warns users not to claim NIGHT tokens from compromised wallets</title>\n<style type=\"text/css\">\na,abbr,acronym,address,applet,article,aside,audio,b,big,blockquote,body,canvas,caption,center,cite,code,dd,del,details,dfn,div,dl,dt,\nem,embed,fieldset,figcaption,figure,footer,form,h1,h2,h3,h4,h5,h6,header,hgroup,html,i,iframe,img,ins,kbd,label,legend,li,mark,menu,nav,\nobject,ol,output,p,pre,q,ruby,s,samp,section,small,span,strike,strong,sub,summary,sup,table,tbody,td,tfoot,th,thead,time,tr,tt,u,ul,var,video{ font:inherit;margin:0;padding:0;vertical-align:baseline;border:0 }\nbody{ font-size:16px; line-height:1.5; color:#999; background:transparent; }\n.wrapper{ overflow:hidden;word-break:break-all;padding:10px; }\nh1,h2{ font-weight:normal; line-height:1.35; margin-bottom:.6em; }\nh3,h4,h5,h6{ line-height:1.35; margin-bottom:1em; }\nh1{ font-size:24px; }\nh2{ font-size:20px; }\nh3{ font-size:18px; }\nh4{ font-size:16px; }\nh5{ font-size:14px; }\nh6{ font-size:12px; }\np,ul,ol,blockquote,dl,table{ margin:1.2em 0; }\nul,ol{ margin-left:2em; }\nul{ list-style:disc; }\nol{ list-style:decimal; }\nli,li p{ margin:10px 0;}\nimg{ max-width:100%;display:block;margin:0 auto 1em; }\nblockquote{ color:#B5B2B1; border-left:3px solid #aaa; padding:1em; }\nstrong,b{font-weight:bold;}\nem,i{font-style:italic;}\ntable{ width:100%;border-collapse:collapse;border-spacing:1px;margin:1em 0;font-size:.9em; }\nth,td{ padding:5px;text-align:left;border:1px solid #aaa; }\nth{ font-weight:bold;background:#5d5d5d; }\n.symbol-link{font-weight:bold;}\n/* header{ border-bottom:1px solid #494756; } */\n.title{ margin:0 0 8px;line-height:1.3;color:#ddd; }\n.meta {color:#5e5c6d;font-size:13px;margin:0 0 .5em; }\na{text-decoration:none; color:#2a4b87;}\n.meta .head { display: inline-block; overflow: hidden}\n.head .h-thumb { width: 30px; height: 30px; margin: 0; padding: 0; border-radius: 50%; float: left;}\n.head .h-content { margin: 0; padding: 0 0 0 9px; float: left;}\n.head .h-name {font-size: 13px; color: #eee; margin: 0;}\n.head .h-time {font-size: 11px; color: #7E829C; margin: 0;line-height: 11px;}\n.small {font-size: 12.5px; display: inline-block; transform: scale(0.9); -webkit-transform: scale(0.9); transform-origin: left; -webkit-transform-origin: left;}\n.smaller {font-size: 12.5px; display: inline-block; transform: scale(0.8); -webkit-transform: scale(0.8); transform-origin: left; -webkit-transform-origin: left;}\n.bt-text {font-size: 12px;margin: 1.5em 0 0 0}\n.bt-text p {margin: 0}\n</style>\n</head>\n<body>\n<div class=\"wrapper\">\n<header>\n<h2 class=\"title\">\nSecondFi warns users not to claim NIGHT tokens from compromised wallets\n</h2>\n\n<h4 class=\"meta\">\n\n\n2026-09-21 17:43 GMT+8&nbsp;&nbsp;&nbsp;<a href=https://crypto.news/secondfi-warns-users-not-to-claim-night-tokens-from-compromised-wallets/><strong>cryptonews</strong></a>\n\n\n</h4>\n\n</header>\n<article>\n<div>\n<p>SecondFi has warned holders of compromised wallets not to redeem upcoming NIGHT allocations after confirming that Midnight’s claim system requires tokens to be claimed through the original wallet ...</p>\n\n<a href=\"https://crypto.news/secondfi-warns-users-not-to-claim-night-tokens-from-compromised-wallets/\">Source Link</a>\n\n</div>\n\n\n</article>\n</div>\n</body>\n</html>\n","isBrief":false,"type":0,"news_type":1,"symbol":"CRDX","symbol_name":"2x Cardano ETF","start_time":0,"source_url":"https://crypto.news/secondfi-warns-users-not-to-claim-night-tokens-from-compromised-wallets/","article_id":"2669542271","we_media_id":null,"thumbnails":[],"rights":{"source":"crypto_news_highlight","url":"https://crypto.news/secondfi-warns-users-not-to-claim-night-tokens-from-compromised-wallets/","rn_cache_url":null,"directOrigin":true},"url":"https://stock-news.laohu8.com/highlight/detail?id=2669542271","pubTimestamp":1789983786,"columns":[],"sourceInfo":{"source_id":"crypto_news_highlight","name":"Crypto News"},"weMediaInfo":null,"summary":"SecondFi has warned holders of compromised wallets not to redeem upcoming NIGHT allocations after confirming that Midnight’s claim system requires tokens to be claimed through the original wallet address.SecondFi has warned affected users not to claim upcoming NIGHT allocations through compromised wallets.Midnight requires NIGHT allocations to be claimed from the original wallet and does not support another address.SecondFi said its migration and recovery tools cannot process or protect NIGHT claims.The June incident resulted in roughly 16.1 million ADA being stolen from 374 wallets.According to SecondFi, some users affected by its June security incident are scheduled to claim NIGHT tokens on Sept. 22, but the wallets tied to those allocations remain permanently compromised. The company said it contacted the Midnight Foundation to explore alternative claiming options before issuing the warning.An update for affected wallet holders with an upcoming NIGHT claimSome affected wallet holder","collect":0,"end_time":0,"defaultTopTitle":"crypto.news","property":[],"viewcount":null,"language":"en","relate_stocks":{"CRDX":"2x Cardano ETF"},"translate_title":"SecondFi 警告用户不要从受损的钱包中领取夜间代币","themeId":null,"isJumpTheme":false,"ttsUrl":null,"symbols_score_info":{"CRDX":0.74},"content_text":"SecondFi has warned holders of compromised wallets not to redeem upcoming NIGHT allocations after confirming that Midnight’s claim system requires tokens to be claimed through the original wallet address.\n\n\nSummary\n\n\n\nSecondFi has warned affected users not to claim upcoming NIGHT allocations through compromised wallets.\nMidnight requires NIGHT allocations to be claimed from the original wallet and does not support another address.\nSecondFi said its migration and recovery tools cannot process or protect NIGHT claims.\nThe June incident resulted in roughly 16.1 million ADA being stolen from 374 wallets.\n\n\n\nAccording to SecondFi, some users affected by its June security incident are scheduled to claim NIGHT tokens on Sept. 22, but the wallets tied to those allocations remain permanently compromised. The company said it contacted the Midnight Foundation to explore alternative claiming options before issuing the warning.\n\nAn update for affected wallet holders with an upcoming NIGHT claimSome affected wallet holders are scheduled to claim NIGHT tokens tomorrow. We have been in touch with the Midnight Foundation regarding options for claiming; unfortunately, NIGHT allocations can only be claimed…— SecondFi (@secondfiapp) September 21, 2026\n\nMidnight’s current redemption system does not support moving an allocation to another wallet before it is claimed. NIGHT tokens assigned to an affected SecondFi address must therefore be redeemed through that original address, which could expose the newly claimed assets to theft.\nSecondFi urged affected users not to attempt the redemption while the issue remains unresolved.\nSecondFi says NIGHT claims cannot move to safe wallets\nThe restriction comes from the NIGHT claim process operated by the Midnight Foundation, which manages the token’s redemption rules separately from SecondFi.\nSecondFi said it has no control over the NIGHT claiming mechanism and directed users seeking alternative options to the Midnight Foundation’s official channels.\nThe company’s own recovery tools cannot solve the problem. Its Wallet Migration Tool is designed to transfer eligible assets still held in SecondFi wallets, while a separate Asset Recovery Tool covers assets affected by the June incident.\nNeither system can process or cover a NIGHT claim.\nThe warning expands on guidance SecondFi has previously given affected users. Its incident FAQ says recovery of NIGHT tokens redeemed to compromised wallets cannot be guaranteed because of the nature of the vulnerability. SecondFi said it was working to help affected users secure their Glacier Drop allocations and would publish verified updates through its official channels.\nMidnight launched its mainnet in March as a privacy focused network using zero knowledge technology. Its NIGHT token forms part of the network’s ecosystem and was distributed to eligible users through the Glacier Drop program.\nThe token distribution has involved allocations that become available under scheduled redemption periods, leaving some SecondFi users with NIGHT claims tied to addresses later identified as compromised.\nSecondFi wallet flaw exposed private key material\nThe problem stems from the SecondFi wallet security incident that occurred between June 21 and June 23.\nAn independent investigation commissioned by EMURGO found that approximately 16.1 million ADA, valued at roughly $2.6 million, was stolen from 374 wallets during the incident.\nSecondFi traced the root cause to a cryptographic flaw in the way its wallet software generated signatures for individual transactions. A value that should have depended on secret information could, under certain conditions, be calculated using publicly available transaction data.\nThe flaw could allow affected private key material to be derived from information recorded on the public Cardano blockchain. Unlike a temporary application vulnerability, the exposure remains tied to the affected address and private key.\nSecondFi has since patched the flaw and said wallets created with the corrected software are not known to be vulnerable.\nGroom Lake, an independent forensic investigation and blockchain intelligence provider engaged by EMURGO, reviewed code, code history and public blockchain records while investigating the breach.\nIts investigation found evidence of two separate attackers. The primary operation was described as sophisticated, external and well funded, with indicators being assessed for possible overlap with known DPRK linked Lazarus Group activity. A second party appeared to have targeted a separate group of wallets during the same period, with no overlap between the affected addresses identified at the time.\nRecovery tools cannot protect upcoming NIGHT redemptions\nFollowing the attack, SecondFi began separating its response into migration and recovery processes.\nThe wallet recovery plan initially involved engineers testing several methods to return assets safely. SecondFi moved approximately 129 million ADA to an independent third party custodian as an emergency measure while work continued.\nIts Wallet Migration Tool now lets users transfer eligible ADA, Cardano native tokens and NFTs remaining in SecondFi wallets to newly created Cardano wallets with another provider. Non Cardano assets need to be moved through their respective network and wallet processes.\nAffected users face a different procedure. SecondFi has been developing a recovery portal that uses zero knowledge proofs to allow users to prove ownership of compromised wallets and submit claims for assets affected by the June incident.\nThe NIGHT redemption sits outside both processes because the allocation has not yet entered the compromised wallet and its claiming rules are controlled by Midnight.\nSecondFi’s warning means users whose allocations are tied to affected addresses currently face a choice between leaving their NIGHT allocation unclaimed or attempting to redeem it into an address whose private key may already be exposed.\nThe company has explicitly advised users to avoid the latter.\nSecondFi is focused on asset recovery\nSecondFi’s recovery work has become its main remaining operation since EMURGO confirmed in July that the wallet platform would not resume normal operations.\ncrypto.news previously reported that EMURGO instructed users to migrate from SecondFi even if their wallets were not identified as affected. Work on the platform was redirected toward migration, claims and recovering assets for users caught in the incident.\nSecondFi has warned users not to delete its app and to retain their seed phrases because at least one of the two will be needed for the recovery process. Users who have already deleted the application need to retain their seed phrase to recover eligible assets.\nThe company has separately cautioned users against fake recovery services and impersonation attempts. SecondFi says it will never request private keys, recovery phrases or wallet credentials, while its official tools do not require users to sign transactions simply to check whether an address was affected.\nFor NIGHT holders approaching their scheduled redemption, SecondFi said questions about a safe alternative claiming method should be directed to the Midnight Foundation because changes to the claim process remain outside SecondFi’s control.\n\n\n\n\n\n                Read more:\n            \n\n                Stripe adds Samsung Pay to Crypto Onramp on Android","kind":"highlight","is_publish_news":true,"is_publish_highlight":false,"is_publish_live":false,"is_publish_wemedia":false,"editions":null,"column":"","sentiment":"0","news_tag":"","news_rank":0,"isVideo":false,"video":null,"symbols":[],"gpt_button":0,"need_auth":false,"need_login_tip":false,"code":"91000000","status":"200"}}}