<?xml version="1.0" encoding="utf-8" standalone="yes"?><rss version="2.0" xmlns:atom="http://www.w3.org/2005/Atom"><channel><title>Nonce on Time Friend</title><link>https://time-friend.com/en/tags/nonce/</link><description>Recent content in Nonce on Time Friend</description><generator>Hugo</generator><language>en-US</language><lastBuildDate>Wed, 02 Sep 2026 13:30:14 +0400</lastBuildDate><atom:link href="https://time-friend.com/en/tags/nonce/index.xml" rel="self" type="application/rss+xml"/><item><title>The Cardano SecondFi Signing Incident: How One On-Chain Transaction Leaked Ed25519 Private Keys</title><link>https://time-friend.com/en/archive/secondfi-ed25519-nonce-signature-leak/</link><pubDate>Sat, 27 Jun 2026 17:29:00 +0000</pubDate><guid>https://time-friend.com/en/archive/secondfi-ed25519-nonce-signature-leak/</guid><description>&lt;p&gt;In late June, SecondFi — the Cardano wallet that grew out of Yoroi — made headlines across the ecosystem. No smart contract was drained. No private keys were stolen off a device. There wasn&amp;rsquo;t even a phishing campaign. The attackers simply &lt;em&gt;read the blockchain&lt;/em&gt;. Within three days, roughly 16 million ADA (about $2.4 million at the time) vanished from 374 wallets, and the team urgently moved another ~129 million ADA to a third-party custodian as a rescue measure.&lt;/p&gt;</description></item></channel></rss>