The Asset Recovery Tool Is Now Live The official asset recovery tool is now available for users whose wallets were affected by the June 2026 security incident. It allows you to verify control of an affected wallet, review any assets eligible for recovery, and submit a recovery request to a new Cardano wallet that you control. The recovery tool is available only at secondfi.io in a web browser. It is not completed through the SecondFi app. You do not need to have submitted a claims ticket before you start. Submitting a recovery request through the official tool begins the claims process for the affected wallet. Recovery is separate from wallet migration. Migration moves supported assets that remain in a wallet to a new wallet. Recovery concerns eligible assets affected by the security incident. How long recovery takes There are two separate stages, each with its own timeframe: -Proof generation, while you use the tool: up to approximately 15 minutes. This takes place on your own device, in your browser, and the browser window must stay open until it is complete. -Claim processing, after you submit: up to five working days. To maintain security measures, submitted claims are processed in batches. No action is needed from you during this stage. Before you start Have the following ready: The recovery phrase for the affected wallet. The tool supports 12, 15, and 24-word recovery phrases. A newly created Cardano wallet that you control, and its receiving address. A hardware wallet can provide an additional layer of security because it keeps private keys offline. A private, trusted computer with a current web browser. Do not use a public or shared computer. A device and internet connection that meet our recommended specifications: at least 2 GB of available memory, a processor no more than five years old, and an internet connection of at least 50 Mbps. Recovery runs entirely in your browser, is demanding on both processing power and memory, and requires you to download a file of about 2 GB. Do not use the affected wallet, an exchange deposit address, or any address you do not control as your destination. How recovery works Recovery is one continuous process. Begin by reading and accepting the Recovery Terms. The tool then takes you through four steps, set out below. If you have more than one affected wallet, repeat the process for each wallet. Step 1: Verify your affected wallet Enter the recovery phrase for one affected wallet. Before you type it, confirm that you are on your own private, trusted computer, that nobody can see your screen, that no screen sharing or recording is running, and that the address bar shows secondfi.io. Step 2: Review what is eligible The tool checks the wallet's addresses against the incident records and shows an estimated breakdown of any assets eligible for recovery. Each affected address is treated as its own request, and only addresses with recoverable assets are submitted. Step 3: Enter your destination address Provide the receiving address of your new Cardano wallet and complete the required confirmations. The destination address is bound into the proof and cannot be changed after you submit. Check every character carefully before you continue. Step 4: Generate the proof and submit The tool generates a zero-knowledge proof on your device for each eligible affected address, binding it to your destination address, and then submits your recovery request. Proof generation can take up to approximately 15 minutes. How long it takes depends on your device's processing power and your internet connection, which is why we recommend the device specifications listed above. It may take longer on older or less powerful computers and for wallets with more affected addresses. Keep the browser window open and do not leave or refresh the page until proof generation is complete. If it is interrupted, the tool will show a retry option. After you submit Once your request has been validated and submitted, it enters claim processing. Claims are processed in batches, so allow up to five working days for your request to be processed and for recovered assets to arrive in your destination wallet. No further action is required unless the tool or our official channels tell you otherwise. Please remember: This is not instant, it will take up to five working days for your request to be processed. You can check your status at any time using the status checker at secondfi.io by entering your new destination address, not the affected wallet address. Why the tool asks for your recovery phrase Your recovery phrase is used locally in your browser to generate the zero-knowledge proof. It is not stored or transmitted. Only the proof is submitted with your recovery request. Browser and security tool warnings Because the recovery tool uses your existing recovery phrase to prove ownership of your wallet, some anti-phishing tools, anti-scam tools and browser extensions may show a warning, or display a blank screen, when you open the tool or enter your recovery phrase. This alone does not mean the official tool is malicious. Before you continue, always check that you are on the exact official domain, secondfi.io, with HTTPS and no extra words, characters or lookalike spellings. Always type the address yourself rather than following a link sent by direct message, email, advertisement or any other third party. What can be recovered Amounts are assessed against the incident snapshot and shown as an estimate. The final amount may differ. For each eligible NFT that cannot be returned directly, a fixed amount of 30 ADA will be included in the ADA shown for the relevant affected address. Rules that protect you Type secondfi.io directly into your browser or from the official X account mentioned below. Never follow a link from an email, advertisement, direct message, or search result. Enter your recovery phrase only yourself, and only in the official recovery flow after confirming that the address bar shows exactly secondfi.io. Make sure nobody can see your screen and that no screen sharing or recording is running. Do not install any browser extension or application claiming to be required for recovery. No fee is required. Anyone who asks you to pay a fee, send ADA or another asset, sign a transaction, or transfer assets to an address they provide is attempting to defraud you. We will never contact you first to ask you to begin recovery. Do not use the affected wallet again. Recovery does not make it safe to use. Our official channels X accounts: @secondfiapp and @secondfi_jp Support portal: support.secondfi.io