How much was lost in the SecondFi hack?

The SecondFi hack resulted in $2.4M in losses on June 30, 2026.

What attack technique was used in the SecondFi exploit?

The specific attack technique used in the SecondFi hack has not been formally classified. Review available post-mortems and on-chain data for technical details.

How can developers prevent similar smart contract attacks?

Preventing smart contract hacks requires a combination of secure coding practices, thorough security audits, and understanding common attack vectors like reentrancy, oracle manipulation, and access control flaws. Smart Contract Hacking (SCH) provides hands-on training to help developers and auditors identify and prevent vulnerabilities before deployment.

SecondFi Hack

TOTAL LOST $2.4M

Medium Jun 30, 2026

Affected Chain 2026 Incident surface

Recovered - No recovery reported

All-Time Rank #615 By amount stolen

Auditors 1 Prior security audit

Incident Overview

The ESG Protocol is an Binance smart contract for supplying or borrowing assets. Through the eToken contracts, accounts on the blockchain supply capital (BNB or BEP-20 tokens) to receive eTokens or borrow assets from the protocol (holding other assets as collateral). The ESG eToken contracts track these balances and algorithmically set interest rates for borrowers.

Incident Report

Protocol / Project SecondFi

Date of Incident June 30, 2026

Primary Source View Post-Mortem

Protocol Information

Protocol Type Lending

Protocol Twitter/X @ESG_Financial

What Auditors Should Check

Audited by Audit Report 1, still lost $2.4M. Prior audits don't guarantee safety, especially after post-audit code changes.

If you're auditing a protocol with similar architecture to SecondFi, these are the critical security checks that could have prevented this incident (June 2026).

Review privileged functions (owner, admin, governance) for potential abuse vectors - centralization risks should be documented and bounded with timelocks or multi-sigs

Master these auditing techniques with hands-on labs and real exploit scenarios in the Smart Contract Hacking course.

Free Trial

Security Audit History

Audit Report 1 Report

Sources & References

01
Source 1 https://rekt.news/secondfi-rekt

Threat Assessment

Severity Level

MEDIUM

Learn to Prevent the Next SecondFi

The SecondFi hack is one of many attacks that skilled auditors are trained to detect before deployment. Master real exploit patterns and defense techniques with hands-on Web3 security training.

Start Free Trial Browse Attack Library