
The Cardano founding entity is redirecting resources to wallet recovery as the incident highlights how wallet security underpins live governance participation and treasury-backed infrastructure coordination.
EMURGO said it is stepping down from Cardano’s five-member Pentad coordination group to focus resources on recovering funds lost in the SecondFi exploit, which drained roughly $2.4 million, or about 16 million ADA, from 374 wallets through a flaw in wallet address generation. The move lands during an active infrastructure funding cycle overseen by Pentad, whose members are Input Output, the Cardano Foundation, EMURGO, Intersect, and the Midnight Foundation. Intersect said the Cardano community approved a 70 million ADA Critical Integrations Budget in late 2025, and the Cardano Foundation’s May 2026 update sought 23 million ADA in Critical Integrations V2 funding for Year 2 support covering Circle USDCx, LayerZero, Pyth, Dune, and native Fireblocks integration. The incident also drew attention to Cardano’s governance architecture, where wallet-based flows are used for DRep delegation, abstain and no-confidence choices, and GovTool-linked direct voting. CardanoCube recorded 28 active governance actions, 379 active DReps, 3,217 votes cast over 30 days, and 87.52 billion ADA in voting power exercised over the same period. Bitquery said the failure was at the wallet layer, tracing it to weak randomness in SecondFi’s key-generation code, while Cardano processed transactions as designed. EMURGO said its focus is now on recovery, migration, and an on-chain restitution process, while the permanence of its step-back from Pentad remains unconfirmed.