Ctrl Wallet to shut down after June security exploit, users urged to withdraw assets by August 3
The multi-chain wallet formerly known as XDEFI will permanently cease operations following a breach that compromised select Cardano wallets.
Ctrl Wallet is done. The multi-chain non-custodial wallet, which supported over 2,500 blockchains and once marketed itself as the Swiss Army knife of Web3 wallets, announced it will permanently shut down on August 3, 2026. The catalyst: a security exploit discovered on June 23 that specifically hit select Cardano-related wallets.
If you’re a Ctrl Wallet user and you’re reading this, stop reading and go export your recovery phrase or move your assets. You have until August 3. After that, every function goes dark.
What happened and what’s at stake
The exploit surfaced on June 23, targeting a subset of Cardano wallets within the Ctrl ecosystem. Rather than attempt to patch the vulnerability and soldier on, the team made the decisive, if jarring, choice to wind down the entire operation.
By July 7, the Ctrl Wallet app and its browser extensions had already been pulled from app stores. That means new users can’t download it, and existing users are on a countdown clock to get their funds out.
The company has been blunt about what comes after the shutdown: nothing. No token migration. No airdrops. No refunds. No compensation of any kind. If your assets are still sitting in a Ctrl Wallet on August 4, you’re on your own.
Ctrl has also warned users to be vigilant about scams. Whenever a wallet shuts down, bad actors inevitably swoop in with fake “migration tools” or phishing links promising to rescue stranded funds. The company has explicitly stated that any such offers are fraudulent.
From XDEFI to Ctrl to closure
Ctrl Wallet rebranded from XDEFI in July 2024, positioning itself as a streamlined, multi-chain solution for users who didn’t want to juggle half a dozen different wallets. At its peak, it supported over 2,500 blockchains.
The bigger picture for wallet security
The June 23 security exploit occurred alongside a broader security issue within the Cardano ecosystem, particularly affecting wallets at SecondFi, which led to significant financial losses estimated at over 16 million ADA (around $2.4 million at that time) due to wallet generation flaws.
What this means for investors
The immediate practical concern is obvious: if you have assets in Ctrl Wallet, move them now. Export your seed phrase, import it into another wallet, or transfer your tokens to a hardware wallet. Do not wait and hope the servers hold up.