Ctrl Wallet to close permanently after recent exploit — users have until Aug. 3 to move funds
Ctrl Wallet has announced it will permanently shut down core wallet services following a recent security incident, giving users until Aug. 3, 2026 to move their crypto before sending, receiving, swapping and dApp connections are disabled.
What’s changing
- From Aug. 3, Ctrl Wallet will disable all in-app wallet functions. The only action users will still be able to perform from the app is export of their 12- or 24-word recovery phrase.
- The company is immediately stopping new downloads and removing the app from browser extension and mobile app stores.
- Ctrl has warned there will be no migration token, swap, or airdrop tied to the closure, and urged users to ignore social posts or websites claiming compensation — these offers are likely scams.
Why this is happening
- The shutdown follows a security incident disclosed in late June affecting some Cardano wallets. Ctrl said it placed parts of its platform in temporary maintenance on June 23 while engineers investigated and protected assets.
- Ctrl was previously XDEFI Wallet and lists roughly 650,000 monthly users, support for more than 2,500 networks (including Cardano and Midnight), and 11–50 employees on LinkedIn.
Immediate user action — what to do now
- Move funds out of Ctrl Wallet to another wallet or exchange before Aug. 3 if you want an in-app transfer path.
- If you miss that deadline, you can still recover assets by importing your 12/24-word seed phrase into a compatible wallet. Ctrl cited MetaMask, Trust Wallet and Phantom as compatible options — and emphasized securely backing up your seed before attempting migration.
- Do not share your seed phrase with anyone or enter it into unverified websites. Verify app downloads from official sources and be vigilant for phishing attempts.
Related security context
- Ctrl’s shutdown comes amid a wider string of crypto infrastructure incidents:
- SecondFi (Emurgo’s rebrand of Yoroi and the platform intended to continue Ctrl’s tech) was exploited on June 24, with attackers stealing about 16 million ADA (roughly $2.4M at the time). SecondFi said it secured about 129 million ADA via emergency measures, moved funds to an independent custodian, and set up a recovery process for 374 affected addresses.
- Blockchain security firm Blockaid detected an active exploit against DeFi platform Summer.fi that drained about $6M.
- Taiko urged users to withdraw assets from all bridges after its chain state verification was compromised, with related ERC20 Vault losses estimated at more than $1M.
- Axelar disabled Secret Network bridge connections after an exploit led to roughly $4.7M in losses; early findings pointed to an issue in Secret Network’s ICS-20 smart contract.
Bottom line
If you use Ctrl Wallet, treat the Aug. 3 deadline seriously: export your seed phrase immediately, move funds to a trusted wallet or exchange, and beware of any offers of compensation or “migration” services circulating online. The closure is another reminder that self-custodial wallets require active, urgent management when a provider signals imminent shutdown.
Read more AI-generated news on: undefined/news
