SecondFi warns users not to claim NIGHT tokens from compromised wallets

SecondFi has warned holders of compromised wallets not to redeem upcoming NIGHT allocations after confirming that Midnight’s claim system requires tokens to be claimed through the original wallet address. Summary SecondFi has warned affected users not to claim upcoming NIGHT allocations through compromised wallets. Midnight requires NIGHT allocations to be claimed from the original wallet and does not support another address. SecondFi said its migration and recovery tools cannot process or protect NIGHT claims. The June incident resulted in roughly 16.1 million ADA being stolen from 374 wallets. According to SecondFi, some users affected by its June security incident are scheduled to claim NIGHT tokens on Sept. 22, but the wallets tied to those allocations remain permanently compromised. The company said it contacted the Midnight Foundation to explore alternative claiming options before issuing the warning. An update for affected wallet holders with an upcoming NIGHT claim Some affected wallet holders are scheduled to claim NIGHT tokens tomorrow. We have been in touch with the Midnight Foundation regarding options for claiming; unfortunately, NIGHT allocations can only be claimed… — SecondFi (@secondfiapp) September 21, 2026 Midnight’s current redemption system does not support moving an allocation to another wallet before it is claimed. NIGHT tokens assigned to an affected SecondFi address must therefore be redeemed through that original address, which could expose the newly claimed assets to theft. SecondFi urged affected users not to attempt the redemption while the issue remains unresolved. SecondFi says NIGHT claims cannot move to safe wallets The restriction comes from the NIGHT claim process operated by the Midnight Foundation, which manages the token’s redemption rules separately from SecondFi. SecondFi said it has no control over the NIGHT claiming mechanism and directed users seeking alternative options to the Midnight Foundation’s official channels. The company’s own recovery tools cannot solve the problem. Its Wallet Migration Tool is designed to transfer eligible assets still held in SecondFi wallets, while a separate Asset Recovery Tool covers assets affected by the June incident. Neither system can process or cover a NIGHT claim. The warning expands on guidance SecondFi has previously given affected users. Its incident FAQ says recovery of NIGHT tokens redeemed to compromised wallets cannot be guaranteed because of the nature of the vulnerability. SecondFi said it was working to help affected users secure their Glacier Drop allocations and would publish verified updates through its official channels. You might also like: MEV bot front-runs $7.8M rsETH exploit on Ethereum Midnight launched its mainnet in March as a privacy focused network using zero knowledge technology. Its NIGHT token forms part of the network’s ecosystem and was distributed to eligible users through the Glacier Drop program.