Emurgo has steered 650,000 users toward SecondFi, the sibling wallet that lost 16 million ADA the day after Ctrl paused for maintenance.
Ctrl Wallet stopped processing user transactions today. From 3 August, the app that once counted more than 650,000 monthly users can only export recovery phrases; sending, receiving, swapping and dApp access are all disabled. The wallet is dead.
Emurgo, the Cardano-focused engineering group that pulled Ctrl under its umbrella on 29 April, announced the shutdown on 7 July. That was two weeks after a security incident on 23 June forced Ctrl into a temporary "maintenance mode" for Cardano wallet users. Engineers never got the app back to full function. The team pulled Ctrl from the Apple App Store, Google Play and every browser extension marketplace on the same day it published the wind-down notice, giving users roughly four weeks to withdraw. Anyone who missed that window now has one function left: export the seed phrase.
The decision looks worse when set against what happened the day after Ctrl paused. On 24 June, attackers exploited SecondFi, the sibling multichain wallet Emurgo has said will carry Ctrl's technology forward, and drained roughly 16 million ADA, worth about $2.4 million at the time. So the migration path Emurgo pitched in its April transition memo was itself being drained in the same window Ctrl's Cardano bug was being triaged. Both products broke in parallel. SecondFi remains operational, but its own exploit is now the first thing existing Ctrl users see when they follow the migration link.
Users who never opened the app since June have a rapidly closing window to move funds. Ctrl's own guidance urged holders to export their recovery phrase "as soon as possible," acknowledging it could not guarantee "how long the app will remain accessible on your device." The extension stores have already pulled the download, meaning any user who deletes the app now loses their only route back in without the seed phrase. That is standard for shuttered products, but the 650,000-user base skewed toward long-tail Cardano holders who do not check custody tools weekly.
Ctrl was formerly XDEFI Wallet, a multichain browser extension that pitched a single interface for EVM chains, Solana, Bitcoin and later Cardano. It was a bet that users wanted breadth over depth. Emurgo's takeover read as a graceful landing for a team that never captured meaningful market share against MetaMask or Rabby. The Cardano exploit turned a graceful landing into an emergency exit.
Multichain wallets have had a rough 18 months. Engineering surface expands with every new chain integration, key derivation model, and RPC endpoint; the security cost line rises in step. When something breaks in a way that touches user funds, the incentive to patch and continue only holds if revenue justifies it. Ctrl's revenue never did. Six figures of monthly users do not produce a fee stream that will fund a security audit programme across a dozen chains, and the cost of a single incident, as Humanity Protocol found out in June, can dwarf a year of that revenue in an afternoon.
The wind-down leaves Cardano's consumer-wallet field visibly thinner. Cardano has never had a MetaMask-tier default; Yoroi, Nami, Eternl and Lace have divided a user base that is still small in absolute terms. Ctrl was the only multichain option that treated ADA as a first-class asset alongside Ethereum and Solana. Its removal narrows the on-ramps for holders who moved between ecosystems without switching apps.
For Emurgo, the message to the Cardano community is that its consumer-wallet strategy sits with SecondFi. That pitch will have to wait for the June exploit to age out of memory. For the 650,000 Ctrl users still holding a recovery phrase, the migration is on them. The app they used to move ADA no longer moves anything.
