# Cardano wallet hack drains 16 million ADA, EMURGO exits Pentad

**Published:** 2026-07-14T16:39:14.452Z  
**Topic:** Layer 2 Scaling  
**Sentiment:** neutral  
**Publisher:** TrendWatcher — https://www.trendwatcher.in/article/4682dc68-d44d-4dfe-a76f-7a6398b9bb05

Cardano hack stole ~16 million ADA from 374 wallets (~$2.4 m) and prompted EMURGO to leave the Pentad funding group, testing governance participation.

The SecondFi exploit on Cardano wiped roughly 16 million ADA—about $2.4 million—from 374 user wallets, and EMURGO announced it is stepping down from the Pentad infrastructure‑funding committee to focus on fund recovery [2].

| At a glance | |
|---|---|
| Lost ADA | ~16 million (≈$2.4 m) |
| Affected wallets | 374 |
| Avg loss per wallet | ~42,800 ADA |
| EMURGO action | Leaving Pentad coordination role |

## How the hack unfolded
The breach targeted SecondFi’s address‑generation code, which suffered weak randomness, allowing attackers to create fraudulent wallet addresses and siphon funds [2]. Bitquery’s on‑chain analysis confirmed the loss of about 16 million ADA, while a broader forensic sweep identified a total of 129 million ADA moved in related activity, though only the 16 million is tied to compromised user wallets [2].

## Governance implications
Cardano’s CIP‑1694 governance relies on ordinary ADA holders delegating voting power through wallet‑based tools such as Yoroi and GovTool. The compromised wallets sit at the heart of this flow, meaning the hack directly hit the layer that underpins treasury votes and DRep delegation [2]. Despite the breach, CardanoCube recorded 28 active governance actions, 379 active DReps, and 3,217 votes over a 30‑day window, representing 87.52 billion ADA in voting power—making the stolen 16 million ADA only about 0.018 % of that voting‑energy total [2].

EMURGO’s withdrawal from Pentad occurs as the community is processing a 70 million ADA Critical Integrations budget (approved in late 2025) and a 23 million ADA Year‑2 request (May 2026). The 16 million ADA loss equates to roughly 23 % of the original 70 million fund and about 70 % of the Year‑2 request, highlighting the financial weight of the exploit within ongoing funding cycles [2].

## What to watch
- **Pentad composition** – Monitor how the remaining four members absorb EMURGO’s coordination role and whether funding timelines shift.  
- **Wallet security upgrades** – Watch for announcements of new audit standards or hardware‑wallet adoption that could reduce future exploit risk.  
- **Governance participation** – Track DRep activity and vote counts in upcoming governance windows to see if the hack dampens user engagement.

The hack underscores the fragility of Cardano’s user‑layer security and tests whether its on‑chain governance can sustain participation when the very wallets that enable voting become attack vectors. The outcome will hinge on EMURGO’s recovery efforts and the community’s response to strengthen wallet safeguards.

## Sources
1. Mcryptoz — [Cardano’s pockets hack uncovered the person layer holding its ...](https://www.mcryptoz.com/cardano/cardanos-wallet-hack-exposed-the-user-layer-holding-its-on-chain-government-together.html)
2. Cryptoslate — [Cardano’s wallet hack exposed the user layer holding its on ...](https://cryptoslate.com/cardanos-wallet-hack-exposed-the-user-layer-holding-its-on-chain-government-together/)

---
Cite as: TrendWatcher, "Cardano wallet hack drains 16 million ADA, EMURGO exits Pentad", https://www.trendwatcher.in/article/4682dc68-d44d-4dfe-a76f-7a6398b9bb05