Please read the Asset Recovery Process Terms & Conditions below. Scroll to the end to accept and continue..
Effective Date: 12 September 2026
1.1 These Asset Recovery Process Terms and Conditions (the "Recovery Terms") form a legally binding agreement between you ("you" or "User") and the entity or entities responsible for operating and making available SecondFi ("SecondFi", "we", "us" or "our") concerning the asset recovery process and the web interface and/or application made available by or on behalf of SecondFi ("Recovery Tool").
1.2 By clicking "Agree and continue", submitting a recovery request, accepting a Final Recovery Offer, or otherwise using the Recovery Tool, you agree to these Recovery Terms. Any confirmation you provide through the Recovery Tool, including a confirmation of a Destination Address, asset inventory, amount, election or settlement, is binding as to the matter confirmed. If you do not agree, do not use the Recovery Tool.
1.3 The SecondFi Terms of Use, Privacy Policy and Cookies Policy available at https://secondfi.io/ are incorporated by reference. If there is an inconsistency concerning the Recovery Tool or recovery process, these Recovery Terms prevail to that extent. A later amendment to the SecondFi Terms of Use applies prospectively only and does not alter a Recovery Request or settlement already submitted or accepted.
1.4 "SecondFi Party" means SecondFi, its affiliates, and their respective directors, officers, employees, agents, contractors and service providers involved in providing or supporting the Recovery Tool or recovery process. "Incident" means the security incident affecting the SecondFi platform that SecondFi has notified to Users, as further described in official SecondFi communications concerning that incident.
1.5 "Affected Address" means a Cardano address identified by SecondFi, acting reasonably and using its incident records, as having held or controlled an affected asset at the relevant time. "Destination Address" means the new Cardano address designated by you to receive recovered assets. "Recovery Request" means a request submitted through the Recovery Tool for recovery of Asset Recovery Qualifying Assets associated with one or more Affected Addresses.
2.1 The Recovery Tool is a limited-purpose process intended to enable an eligible User to verify control of an Affected Address, review the assets identified by SecondFi as eligible for recovery, and submit a Recovery Request for transfer to a Destination Address.
2.2 The recovery process may be completed through a web interface or application separate from the SecondFi application. The official recovery process is available only through the official SecondFi domain and channels identified in official SecondFi communications. You must not rely on links received through unsolicited emails, advertisements, direct messages or social-media accounts.
2.3 Recovery is performed on a per-wallet and, where applicable, per-Affected-Address basis. A User may need to complete the process separately for each affected wallet or Affected Address.
2.4 The recovery process is not a general claims-administration process for all losses arising from the Incident. Subject to any Final Recovery Offer accepted by you, SecondFi will make available for transfer only the assets or amounts expressly identified as recoverable through the Recovery Tool or in that Final Recovery Offer, and nothing else.
2.5 You acknowledge that, following the Incident, certain protective measures described in official SecondFi communications were taken to safeguard assets at risk of further unauthorised transfer, including by relocating at-risk assets on-chain (the "Protective Measures"), and that the recovery process is the means by which assets preserved through the Protective Measures are made available for transfer to Users. By submitting a Recovery Request or accepting a Final Recovery Offer, you confirm and ratify the Protective Measures to the extent they related to assets associated with your Affected Address.
3.1 "Asset Recovery Qualifying Assets" means, solely to the extent identified by SecondFi as eligible and recoverable in connection with an Affected Address:
(a) Cardano native tokens, in kind: ADA, NIGHT, SHEN, STRIKE, iUSD, MIN, SURF, WMTX, STUFF, USDM, IAG, VIPER, INDY, BODEGA, PALM, FLDT, HOSKY, COPI, USDA and DRIP;
(b) Cardano NFTs that can be returned in kind; and
(c) Cardano NFTs that cannot be returned in kind, for which the applicable recovery amount will be communicated by SecondFi.
3.2 SecondFi will use reasonable efforts to identify and make available for recovery the Asset Recovery Qualifying Assets associated with each Affected Address, subject to these Recovery Terms and any applicable technical, legal, sanctions or fraud-related restriction. Recovery of any particular asset, or of the full extent of a User's affected Cardano assets, is not guaranteed.
3.3 Asset Recovery Qualifying Assets exclude all other assets, including assets received by an affected wallet after the Incident that could not be preserved through the Protective Measures or made available for transfer to Users, assets on any blockchain other than Cardano, Cardano native tokens not listed in clause 3.1(a), NFTs that are not identified as recoverable NFTs, staking rewards that couldn't benefit from the Protective Measures, governance or voting rights, delegated or locked positions, liquidity-provider positions, derivatives, claims, contractual rights, fiat currency, cash, interest, appreciation, lost opportunity, fees, costs, taxes, damages and any other asset, amount or form of compensation.
3.4 The inventory shown in the Recovery Tool is based on incident records and a relevant snapshot selected by SecondFi. It is an estimate and may not include every asset or reflect subsequent movements, changes in metadata, market conditions, asset value or blockchain events. SecondFi's determination of whether an asset is an Asset Recovery Qualifying Asset, whether it can be returned in kind, and the amount or token type to be provided is final for purposes of this recovery process, subject to any rights that cannot lawfully be excluded. A User may request one review of an inventory, eligibility or calculation determination within seven (7) days after notification, identifying the specific alleged error and providing supporting evidence. SecondFi may correct manifest error, technical error, duplicate counting or material omission. A review request does not suspend an applicable deadline unless SecondFi confirms otherwise. If no timely review request is made in accordance with this clause 3.4, the applicable inventory, eligibility or calculation determination is final and binding on you, and you may not later dispute that determination, without limiting any right that cannot lawfully be excluded.
4.1 You may use the Recovery Tool only if you:
4.2 As part of the recovery process, SecondFi will use a zero-knowledge proof tool or other cryptographic verification tool (the "Verification Tool") developed by third parties in collaboration with SecondFi, to generate, on your device, a proof establishing control of the relevant wallet credentials without transmitting the recovery phrase. A successful result from the Verification Tool verifies control of a wallet or address; it does not by itself establish that the relevant credentials have not been copied, exposed, compromised or used by another person.
4.3 The Verification Tool and its underlying software, cryptographic methods and dependencies may contain defects, vulnerabilities, implementation errors, compatibility issues or other limitations and may produce an inaccurate, incomplete, false-positive, false-negative or inconclusive result. To the maximum extent permitted by applicable law, SecondFi does not represent, warrant or guarantee that the Verification Tool is accurate, complete, reliable, uninterrupted, secure or error-free, will accept every valid proof or reject every invalid, manipulated or fraudulent proof, will identify copied, exposed or compromised credentials, will distinguish the lawful owner of an Affected Address from another person who possesses or can use the relevant credentials, will be compatible with every wallet, device, operating system or configuration, or will remain available or complete verification within a particular period. An audit, security review, test, formal assessment or previous successful use of the Verification Tool is limited to its scope, assumptions, configuration and date and does not constitute a representation, warranty or guarantee that the Verification Tool is secure, accurate, complete, fit for a particular purpose or free from defects or vulnerabilities.
4.4 A result produced by the Verification Tool is generated automatically and is one component of SecondFi's assessment. It is not binding or conclusive as to identity, legal or beneficial ownership, or entitlement generally; however, as between persons submitting a Recovery Request for the same Affected Address, a successful result is the basis on which SecondFi transfers the recovery outcome under clause 5.6, and no SecondFi Party has any further obligation to determine ownership or entitlement. SecondFi may reject, repeat or refer a result for review where SecondFi considers this reasonably necessary, including because of an inconsistent, disputed or inconclusive result or another material inconsistency affecting the reliability of the Recovery Request.
4.5 SecondFi does not require you to disclose or transmit a recovery phrase, private key, password or wallet credential. Where the Verification Tool supports local credential processing, the credential must remain on your device and must not be entered into any field, page or tool other than the locally executed, official verification component identified by SecondFi. If you are asked by any person to disclose such information, stop immediately.
5.1 You must provide a newly generated, compatible Cardano Destination Address from a wallet that you control and that is not connected with, derived from or affected by the Incident. You must not use an exchange deposit address, an address belonging to another person, or an address that you suspect is compromised.
5.2 Before submitting a Recovery Request, you must independently verify the full Destination Address, network, wallet, assets, amounts, token types, NFT treatment and all other transaction details. You accept sole responsibility for any loss resulting from an incorrect, incompatible, compromised or unauthorised Destination Address or wallet. Blockchain transfers may be irreversible after submission and confirmation.
5.3 The affected SecondFi wallet must no longer be used. You must not send funds to it, reconnect it to any application, or attempt to transact with it except as expressly instructed through an official SecondFi recovery or migration process. You must preserve information reasonably required for the recovery process and must not attempt to obtain a duplicate recovery, reward or payment through another route.
5.4 By submitting a Recovery Request, you authorise SecondFi and its service providers to take the technical and administrative steps reasonably necessary to verify the request and to construct, facilitate, submit, relay and record the smart contract transaction that transfers the confirmed recovery outcome to the Destination Address. No SecondFi Party will access your wallet credentials, hold any asset in an account for you, or sign or approve any transaction from your wallet or Destination Address on your behalf, and no SecondFi Party may alter the Destination Address, assets, amounts or other material transaction details after your approval.
5.5 You must not submit a Recovery Request more than once for the same Affected Address or assets, or seek recovery through another person, wallet or process. If you receive a duplicate recovery, an amount or asset to which you are not entitled, or a recovery relating to assets already recovered through another route, you must promptly notify SecondFi and, on request, return the duplicate or excess amount in the manner reasonably specified by SecondFi. You must promptly notify SecondFi of any recovery, restitution, insurance payment, settlement, chargeback or other compensation relating to the same affected assets. To the extent you receive a duplicate or excess recovery, SecondFi may require repayment or set off the excess against any unpaid recovery amount, subject to applicable law. You agree to provide reasonable cooperation in asset tracing, law-enforcement engagement and recovery proceedings.
5.6 Because a transfer of the recovery outcome cannot practically be reversed once made, the recovery outcome for a given Affected Address will be transferred to the Destination Address specified in the first Recovery Request that successfully completes verification and processing for that Affected Address.
5.7 To the extent SecondFi provides you with compensation in connection with the Incident from SecondFi's own resources (which does not include the transfer to you of assets preserved through the Protective Measures), you assign to SecondFi, and SecondFi is subrogated to, your rights and claims against any person who unlawfully took, held, transferred, received or benefited from the relevant assets, to the extent of the value SecondFi has provided to you. SecondFi may pursue, settle, compromise or otherwise deal with any such right or claim in its own name or in your name, and you must provide reasonable cooperation, including under clause 5.5, and execute any document reasonably requested to give effect to this clause. This clause does not require you to pursue any claim yourself, and any amount SecondFi recovers under this clause does not reduce or otherwise affect the recovery already provided to you.
6.1 Submission of a Recovery Request does not guarantee recovery, payment, transfer, timing or any particular outcome. A Recovery Request is subject to verification, technical feasibility, availability of assets, applicable eligibility criteria and any subsequent Final Recovery Offer.
6.2 The amount and assets displayed in the Recovery Tool are an estimate until confirmed in a Final Recovery Offer or other final confirmation issued through the official Recovery Tool. A Final Recovery Offer may state the Asset Recovery Qualifying Assets to be transferred, the applicable treatment of qualifying NFTs, any deductions (such as network fees), the proposed timing and any further conditions.
6.3 If the Recovery Tool presents a Final Recovery Offer, your acceptance of that offer is a condition to receiving the offered recovery unless the offer expressly states otherwise. By clicking "Accept" or equivalent, you agree that the offered assets and amounts constitute the complete recovery available to you under the recovery process for the relevant Affected Address or addresses, subject to the express terms of the Final Recovery Offer.
6.4 By accepting a Final Recovery Offer, submitting a Recovery Request where no separate offer is presented, or otherwise accepting a recovery transfer, you acknowledge and agree that you will receive no asset, amount or compensation in connection with the Incident other than the Asset Recovery Qualifying Assets and amounts expressly listed in the applicable final confirmation or Final Recovery Offer. Without limitation, you will not receive compensation or recovery for any asset not listed, any omitted or unsupported token, any NFT other than the treatment expressly stated, any staking or other reward, any increase or decrease in value, or any loss, cost, fee, tax, damage or other claim relating to any other asset or alleged loss.
6.5 Except for rights or liabilities that cannot lawfully be waived or released, your acceptance under clause 6.3 or 6.4 is intended to be full and final as to the recovery of the listed affected assets and any claim for recovery, reimbursement, replacement or compensation for assets or losses not listed. This does not release a claim for failure to provide the assets or amounts expressly accepted in the applicable Final Recovery Offer, subject to these Recovery Terms, including the limitations of liability in clause 9.3.
6.6 To the maximum extent permitted by law, upon receipt of the assets and amounts expressly stated in the applicable Final Recovery Offer or final confirmation, you irrevocably and unconditionally release and discharge each SecondFi Party from all claims, demands, actions, proceedings, losses, liabilities, costs and expenses arising out of or relating to the Incident, the Protective Measures, the affected wallet, the Recovery Tool, the Verification Tool, the recovery process or the assets covered by the Final Recovery Offer, whether known or unknown, accrued or contingent, direct or indirect, and whether arising in contract, tort, statute, restitution, equity or otherwise. You agree not to commence, maintain or participate in any claim or proceeding inconsistent with this release.
7.1 SecondFi will not charge a fee to submit a Recovery Request. You are responsible for any Cardano network fee, wallet-provider fee, exchange fee, tax, reporting obligation or other legal consequence arising from your receipt, custody, transfer or use of recovered assets, except to the extent the applicable Final Recovery Offer expressly states otherwise.
7.2 Support may be provided as discretionary informational assistance. Support does not make any SecondFi Party your custodian, fiduciary, adviser or transaction counterparty and does not guarantee accuracy, availability, compatibility, timing, completion or any recovery outcome.
7.3 SecondFi may modify, suspend, restrict or discontinue the Recovery Tool, or set a deadline, where reasonably necessary for security, legal, regulatory, technical or operational reasons. SecondFi also reserves the right, in its sole discretion, to suspend or delay the processing of any Recovery Request, without liability, where it considers this necessary or appropriate, without limiting any right that cannot lawfully be excluded. Any deadline or suspension will be communicated through official SecondFi channels where reasonably practicable. You are responsible for acting before a deadline expires.
7.4 SecondFi will never ask you to send assets to a "safe", "verification" or "recovery" wallet, pay a fee to unlock recovery, provide a recovery phrase outside the official Recovery Tool, provide a private key or password, grant remote access, or approve an unrelated transaction. Stop and verify through an official SecondFi channel if you receive any such request.
8.1 The Recovery Tool and recovery process are provided on an "as is" and "as available" basis. They may be affected by technical defects, inaccurate incident data, proof-generation failure, browser or device limitations, network congestion, outages, cyberattacks, third-party wallet failures, asset illiquidity, blockchain events and other matters outside SecondFi's reasonable control.
8.2 SecondFi does not warrant that any asset can be recovered, returned in kind, valued accurately, transferred successfully or received by any particular time. Digital assets may lose value and may be subject to market volatility, illiquidity, protocol risk, smart-contract risk, regulatory restrictions and tax consequences.
8.3 You are responsible for selecting and securing your wallet, device, credentials and Destination Address, and for independently reviewing every transaction and confirmation. A blockchain transaction identifier is the principal record of on-chain submission.
8.4 SecondFi may maintain comprehensive records of Recovery Requests, asset determinations, verification steps, approvals, decisions, transfers, support interactions and related on-chain activity. Such records may be reviewed by SecondFi's auditors, professional advisers, insurers, regulators or law-enforcement authorities where appropriate or required.
9.1 Nothing in these Recovery Terms excludes or limits liability to the extent it cannot lawfully be excluded or limited.
9.2 To the maximum extent permitted by law, SecondFi and the SecondFi Parties are not liable for any indirect, incidental, special, punitive or consequential loss; loss of profit, revenue, business, opportunity, data, goodwill or asset value; or loss arising from blockchain or smart-contract malfunction, hack, exploit, network event, market volatility, illiquidity, third-party service, incorrect or incompatible wallet or Destination Address, compromised credentials, unauthorised instruction, inability to recover an asset in kind, or a matter outside SecondFi's reasonable control.
9.3 Subject to clause 9.1, the aggregate liability of SecondFi and the SecondFi Parties for all claims arising out of or relating to these Recovery Terms, the Recovery Tool or the recovery process is limited as follows:
(a) Failure to deliver an accepted recovery outcome. For a claim concerning an accepted Final Recovery Offer or other final confirmation, liability is limited to the value of the assets or amounts expressly stated in that offer or confirmation and not delivered in accordance with it, valued as at the date of that offer or confirmation.
(b) Error in determining eligible assets. For a claim alleging an error in determining Asset Recovery Qualifying Assets (including omission, miscalculation or misclassification), liability is limited to the lesser of (i) the value of the Asset Recovery Qualifying Assets that should have been included, as determined under the recovery methodology, and (ii) USD 10,000.
(c) Other claims. For any other claim not falling within point (a) or (b), the aggregate liability of SecondFi and the SecondFi Parties will not exceed USD 10,000.
In this clause 9.3, "aggregate liability" means the total liability for all claims, whether in contract, tort, statute, restitution, equity or otherwise, arising from the same event, transaction, determination or snapshot. No claim arising from the same event or transaction may be counted more than once for the purpose of applying these limits. For the purposes of point (b), the recovery methodology includes the snapshot date, eligible token list, NFT treatment, pricing sources, valuation methodology and any other criteria published or applied by SecondFi in determining Asset Recovery Qualifying Assets. The recovery methodology itself is not subject to challenge except for manifest error or fraud.
9.4 You will indemnify and hold harmless SecondFi, its affiliates and their respective directors, officers, employees and agents from claims, losses, costs and reasonable legal fees arising from your breach of these Recovery Terms, unlawful or fraudulent use of the Recovery Tool, misrepresentation of entitlement, double recovery, or your use of a third-party wallet or service.
10.1 Personal information connected with the Recovery Tool and recovery process is handled under the SecondFi Privacy Policy. Wallet addresses, proof-related data and transaction data recorded on a public blockchain may be permanent and publicly accessible and cannot be altered, erased or restricted by SecondFi.
10.2 You acknowledge that the Recovery Tool may process wallet addresses, transaction information, proof metadata, technical information and other information reasonably necessary to administer verification, eligibility, recovery, support, legal compliance and audit records.
10.3 If additional verification or identity information is ever required for a specific purpose, the applicable privacy notice will describe the information collected, the purposes of processing, retention, disclosures and any applicable cross-border transfers. SecondFi will seek to limit collection and access to information reasonably necessary for those purposes.
11.1 These Recovery Terms and any non-contractual obligation arising out of or in connection with them are governed by Singapore law. Any dispute arising out of or in connection with these Recovery Terms, the Recovery Tool or the recovery process will be finally resolved by arbitration administered by the International Chamber of Commerce under its Rules. The seat is Tokyo, Japan, the tribunal consists of one arbitrator and the language is English. To the extent permitted by law, disputes must proceed individually and not as a class, consolidated or representative action.
11.2 If any provision is invalid or unenforceable, it will be enforced to the maximum permissible extent and the remainder will continue in effect. A delay or failure by SecondFi to exercise a right is not a waiver. You may not assign these Recovery Terms without our written consent; we may assign them to an affiliate or successor in connection with a restructuring, business transfer or cessation of operations.
11.3 Clauses 2.5, 3.4, 5.5, 5.7, 6, 9.1, 9.2, 9.3, 9.4, 10, and 11 survive completion of the recovery process, your receipt of a recovery outcome, and any termination, suspension or discontinuation of the Recovery Tool.
11.4 These Recovery Terms, together with the applicable Final Recovery Offer and the SecondFi Terms of Use, Privacy Policy and Cookies Policy, are the entire agreement concerning the Recovery Tool and recovery process. They prevail over any conflicting FAQ, social-media post, support communication or other material, except that a Final Recovery Offer controls to the extent it expressly addresses a matter specifically applicable to that offer.
11.5 Notices and support requests must be submitted through the official SecondFi support channel at https://secondfi.io/ or another official channel identified in the Recovery Tool.
— End of the Asset Recovery Process Terms and Conditions —
Start with a wallet you used with SecondFi that we believe was affected by the incident. Recovery is completed one wallet at a time. Each address will be checked against the incident records, and any eligible affected assets will be identified separately for each address.