SecondFi has announced progress in its investigation of a recent Cardano wallet theft, identifying addresses linked to two attackers. Between June 21 and 23, the attackers executed a sophisticated automated attack, stealing funds from hundreds of wallets. Attacker A drained 171 wallets in two operations, while Attacker B targeted 203 wallets in a third wave. The company has published the collection addresses and stake keys of the attackers, revealing that approximately 4.02 million ADA remains in Attacker B's address, which is now flagged and under on-chain monitoring. SecondFi is collaborating with law enforcement and Cardano partners to track the stolen assets.