Ctrl Wallet Plans Shutdown Weeks After Reported Security Exploit

Non-custodial multichain wallet Ctrl Wallet is winding down its services after a recent security incident affecting some Cardano-related activity. The wallet’s operators say users have until Aug. 3, 2026 to move funds out of the app.

In an announcement posted on Tuesday and reiterated in a separate blog update, Ctrl Wallet said the application will be taken offline for most operations starting Aug. 3, while retaining the ability for users to export their recovery phrases. The service will also be removed from app and browser extension stores, and new downloads will stop immediately.

Key takeaways

• Ctrl Wallet will stop allowing sending, receiving, swapping, and other in-app actions after Aug. 3, 2026.
• Users will still be able to export recovery phrases, but there is no migration token or airdrop planned.
• The shutdown follows a security issue reported by Ctrl Wallet on June 23 that prompted a temporary “maintenance mode.”
• Ctrl Wallet is advising users to transfer assets before the deadline and to beware of fake sites or social media posts offering incentives.
• The wallet supported thousands of networks and was connected to Cardano’s ecosystem via a multichain setup previously transitioned under Emurgo’s umbrella.

App functionality set to end, recovery-phrase export remains

Ctrl Wallet told users that from Aug. 3, 2026, core wallet operations inside the app will be unavailable. According to the company’s update, functionality will remain limited to exporting users’ recovery phrases, which are typically 12-word or 24-word seed phrases.

As part of the deprecation process, Ctrl Wallet said it will remove the app from both application and browser extension stores and halt downloads right away. That means users who rely on the wallet for day-to-day access will need to prepare ahead of time to avoid getting locked out of routine transfers.

When the deadline arrives, Ctrl Wallet’s guidance is straightforward: users should use the exported phrase to access funds in another compatible wallet provider. The company said users can import their recovery phrase into wallets including MetaMask, Trust Wallet, and Phantom.

What users should do before Aug. 3

Ctrl Wallet recommended that users export their recovery phrases and transfer assets to another exchange or wallet before Aug. 3. The operator’s stated reasoning is operational: after that date, the wallet will not support standard activity such as sending and receiving.

In addition, Ctrl Wallet emphasized that there will be no token-based migration or “replacement” distribution event. The wallet also warned users to be cautious if they encounter impersonation attempts—such as posts or websites promising compensation or incentives—associated with the shutdown.

For investors and traders, the practical implication is that operational risk shifts from security concerns inside the wallet to execution timing: once app actions are disabled, users must rely on other infrastructure to move assets. That makes it especially important to complete exports and transfers well in advance of the cutoff date.

Shutdown follows June security incident and Cardano-related exposure

Ctrl Wallet said it reported a security issue on June 23, involving some Cardano wallets on its platform. At the time, the wallet stated it entered a temporary “maintenance mode” intended to protect user assets while engineering work restored full functionality.

The new deprecation timeline comes shortly after that period and indicates that the issue—or the broader system response to it—has culminated in an exit from ongoing wallet operations. While Ctrl Wallet did not outline every technical detail in the user-facing update provided in the article, it did connect the deprecation to its decision to protect assets and then ultimately stop allowing on-platform activity.

The wallet’s broader ecosystem reach may also affect users’ choices for migration. Ctrl Wallet said it supported over 2,500 blockchain networks, which can be convenient for multisystem users—but also means many holders may be managing assets across chains and need to validate that their chosen replacement wallet fully supports the same assets and networks.

Ctrl Wallet’s Emurgo/SecondFi transition adds context

Ctrl Wallet previously announced a structural change on April 29, saying it would operate under the Emurgo umbrella and that its multichain architecture would continue inside the SecondFi wallet.

SecondFi is described as a self-custodial platform built on Cardano and was developed by Emurgo, the “for-profit arm of Cardano.” The wallet had been positioned as a continuation of Ctrl Wallet’s approach following that transition, and the SecondFi rebranding from the Yoroi wallet was reported as occurring in April 2026.

Separately, a vulnerability in SecondFi led to attackers draining funds on June 24, according to earlier coverage linked in the source material. That incident was reported to have resulted in an estimated loss of around 16 million ADA (about $2.4 million at the time). Days later, SecondFi published a recovery path for affected wallet addresses and said emergency measures secured roughly 129 million ADA transferred to an independent third-party custodian for verification and recovery.

For Ctrl Wallet users, the bigger takeaway is that the timeline of the shutdown overlaps with heightened attention on Cardano wallet security. Even though Ctrl Wallet’s June 23 issue was described as affecting “some Cardano wallets on the platform,” the shutdown now forces users to operationally exit the service regardless of whether they experienced the earlier vulnerability directly.

With Aug. 3 approaching, users should watch for any final instructions from Ctrl Wallet about phrase export availability and removal timing, and should be prepared to act quickly if they need to switch to another wallet provider. The lack of a migration token or airdrop underscores that the exit is handled by self-custody workflows—exporting seed phrases and moving funds—rather than by a platform-led replacement process.