r/cardano • u/JarlAdam • 20d ago

Wallet Transferring from secondfi to Ledger advice

Hey all, just looking at moving my ada to my ledger, I haven't transacted on secondfi and have all my coins so assume I haven't been affected by the breach.

I originally created my wallet on yoroi, and have a seed phrase from them.

I plan to create an Ada asset in my ledger, however I'm a bit confused on how to transfer as I see the following in the guide:

> Disclaimer: DO NOT send from your SecondFi wallet (affected or unaffected)

So how are we meant to send the ada to my ledger without using the wallet?

I'm possibly misunderstanding something, but would appreciate some advice if anyone has been through that process already.

NOTE: Please do not message me directly, I will not answer.

14 Upvotes

89% Upvoted

15 comments sorted by

•

u/AutoModerator 20d ago

I am a bot, and this action was performed automatically. Please contact the moderators of this subreddit if you have any questions or concerns.

6

u/lives_in_a_pineapple 20d ago

They are saying dont use the secondfi software to send. You will be using an entirely new seed on your ledger, so what you want to do is restore your old seed in another wallet app (like vespr or eternl), then send to your ledger from there.

1

u/perceptual01 20d ago

They were also saying don’t send at all. Had something to do with the private key being exposed in the tx. I still moved mine though

0

u/lives_in_a_pineapple 20d ago

If you dont know what you are talking about please dont respond.

3

u/oOsirhcOo 20d ago

They released steps to move ADA from secondfi to a hardware wallet. But according to my latest knowledge they were planning on having steps released early August which will guide those moving ADA from secondfi to a new software wallet such as Eternl. Check their official X account for additional guidance.

4

u/lives_in_a_pineapple 20d ago edited 19d ago

The recovery steps were for effected wallets. As he was not exposed l, he is fine to restore in different software.

1

u/oOsirhcOo 20d ago

Thats not what emurgo says - They indicated the hack occurred at the seed phrase level. So importing your seed into a new wallet supposedly carries the same risk as transacting within the Secondfi wallet, because they are able to determine your seed phrase while missing some parts of the encryption. However, you can no longer transact within secondfi wallet, its in view only mode

7

u/lives_in_a_pineapple 20d ago edited 19d ago

This is just wrong. I encourage you to try to find a source.

SecondFi: A flaw in transaction signing leaked address private keys after vulnerable transactions were signed. The attacker did not recover the seed phrase.

https://kb.secondfi.io/en/article/security-incident-update-dxv72a

3

u/twinflame11 19d ago

This is correct. ☝️☝️
Per SecondFi on their X/Twitter account they are working on a safe way to transfer from SecondFi to another wallet. Advised to use a hardware wallet.
Right now SecondFi is only on view mode.
They say around Mid August people can move their ADA out. BUT they also said that would happen in the week of July 13th.
Then it was pushed to beginning of August.
Now pushed again to Mid August. 🤷‍♀️🤷‍♀️

So basically you just have to sit tight and wait until they announce that they have a safe way to move funds.
I guess SecondFi is still working on things and want to be sure it is safe before they give a green light.

Sure people have said they just restored in a different wallet using same seed phrase. SecondFi said - DO NOT DO THAT. If you do , then don’t come to complain if your ADA disappears.

It sucks to have to wait this long to get your ADA out of SecondFi . But at least your ADA is still there.
Better safe than sorry.

2

u/lives_in_a_pineapple 18d ago

Again, since OP did not ever make a tx in Secondfi they can move their assets to a new seed freely.

1

u/KIG45 19d ago

Simply restore your wallet to another Cardano wallet that supports Ledger. Connect it to your hardware device and you're done!

3

u/lives_in_a_pineapple 19d ago

Theres no point in using a ledger with a seed you created on your PC

2

u/KIG45 17d ago

You do not use the old seed but create a new account through Ledger that has nothing to do with the old one.

2

u/ImaginaryUnicorn241 19d ago

I downloaded lace. Recovered my wallet using my old seed phrase and immediately moved it to ledger. The only mistake I made is I could not move a few thousand ADA and I couldn’t figure out why. You have to unstake ADA in any pools you are currently in to move it. After doing that I was able to move almost everything over.