EMURGO steps back after SecondFi hack hits 374 Cardano wallets

Cardano investors are watching more than a wallet exploit here. The SecondFi hack hit the same wallet layer many ADA holders use to delegate voting power and take part in on-chain governance, putting security concerns next to live treasury decisions.

EMURGO said it is stepping back from Pentad, the five-member group that coordinates Cardano infrastructure funding, so it can focus on fund recovery, migration, and an on-chain restitution process. The move follows a flaw in SecondFi's wallet address generation system that drained about $2.4 million, or roughly 16 million ADA, from 374 wallets. Bitquery said the issue came from weak randomness in key generation, while the Cardano chain itself processed transactions normally.

That matters because Cardano's CIP-1694 governance starts at the wallet level. Yoroi's documentation shows users can delegate to a DRep, abstain, or select no confidence from inside the wallet, and governance actions are also tied to reward withdrawal flows. CardanoCube recorded 28 active governance actions, 379 active DReps, 3,217 votes, and 87.52 billion ADA in voting power over the past 30 days.

EMURGO's exit also lands during an active funding cycle. Pentad has been steering treasury-backed infrastructure work, including a 70 million ADA Critical Integrations budget and a later 23 million ADA Year 2 funding request.