Woofun AI reports that SecondFi disclosed details regarding a second security incident where an unrelated third party exploited a vulnerability to steal approximately 4 million ADA and various Cardano native tokens. The project team contacted the attacker via on-chain messages, proposing a white-hat resolution that required returning 90% of the stolen assets—roughly 3.618 million ADA and related tokens—to a recovery address, allowing the attacker to retain 10% as a reward. This offer expired at 7:59 on July 11, 2026, without any response from the recipient. SecondFi emphasized that the lapse of this deadline does not preclude them from continuing investigations, coordinating with third parties, or seeking legal and law enforcement assistance.