Ctrl Wallet to Go Offline for Most Functions on Aug. 3, 2026 After Security Incident

Noncustodial multichain wallet Ctrl Wallet will wind down and largely shut off in-app functionality following a recent security incident tied to some Cardano-related activity. The operator said users have until Aug. 3, 2026 to move assets out, after which sending, receiving, swapping and other routine actions inside the app will no longer be available. In notices posted Tuesday and reiterated in a separate blog update, Ctrl Wallet said it will take the application offline for most operations starting Aug. 3, 2026, while keeping a limited feature in place so users can export their recovery phrases. The company also plans to remove the app from mobile and browser-extension stores, and said new downloads will stop immediately. Users will still be able to export their recovery phrases—typically 12-word or 24-word seed phrases—but Ctrl Wallet said there will be no migration token, replacement distribution, or airdrop tied to the shutdown. What changes on Aug. 3, 2026 - Core wallet actions inside Ctrl Wallet will be disabled, including sending, receiving, swapping, and other in-app activity. - The remaining supported function will be exporting recovery phrases so users can restore access elsewhere. - The app and browser extension will be pulled from stores, and downloads will cease right away. Ctrl Wallet said the intended path for users after Aug. 3 is to export the recovery phrase and import it into another compatible wallet provider. The company cited options including MetaMask, Trust Wallet, and Phantom. What users should do now Ctrl Wallet urged users to export their recovery phrases and transfer assets to another wallet or exchange before Aug. 3, 2026, noting the limitation is operational: once the cutoff hits, the wallet will not support standard activity such as sending or receiving. The operator also warned users to watch for impersonation attempts connected to the shutdown, including fake sites or social posts promising compensation or incentives. Security incident and Cardano exposure Ctrl Wallet previously disclosed a security issue on June 23 involving some Cardano wallets on its platform, which led it to place services into a temporary “maintenance mode.” The newly announced deprecation schedule follows that episode and signals that the incident—or the broader response to it—has resulted in an exit from ongoing wallet operations. The company did not provide detailed technical disclosures in the user-facing update referenced here. It did, though, link the decision to efforts to protect user assets and ultimately halt on-platform activity. Ctrl Wallet also highlighted its broad footprint, saying it supported more than 2,500 blockchain networks. For users migrating off the service, that scope raises an added practical consideration: verifying that any replacement wallet supports the same assets and networks they currently use. Emurgo/SecondFi transition adds context Ctrl Wallet announced on April 29 that it would operate under the Emurgo umbrella, with its multichain architecture continuing within the SecondFi wallet. SecondFi is described as a self-custodial platform built on Cardano and developed by Emurgo, the “for-profit arm of Cardano.” Reporting previously noted that SecondFi was rebranded from the Yoroi wallet in April 2026. Separate coverage cited in the source material also reported a vulnerability in SecondFi on June 24 that led to attackers draining funds, with estimated losses of about 16 million ADA (roughly $2.4 million at the time). SecondFi later published a recovery path for affected addresses and said emergency measures secured roughly 129 million ADA transferred to an independent third-party custodian for verification and recovery. For Ctrl Wallet users, the key point is that the shutdown timeline coincides with heightened scrutiny of Cardano wallet security. Even users unaffected by the June 23 incident will still need to leave the platform operationally by exporting seed phrases and moving funds before Aug. 3, 2026. The absence of a migration token or airdrop reinforces that the exit process relies on standard self-custody steps rather than a platform-led replacement program.