TOLY’S DOG (ADA)

There's an interesting project brewing on Cardano: RealFi $USDr, where staking a stablecoin can earn you up to 9% APY.

It's similar to a bigger existing project, Ondo $USDY.

The difference is that USDr's yield comes with risk attached, since it's generated through "direct lending + money markets + T-bills + global floating-rate bonds," which is why it's higher than USDY's 3.5%.

If USDY is a tokenized MMF, USDr feels closer to a tokenized private credit fund.

The best part: no lockup, anyone can access it, and because the yield is tied to real-world finance, you can expect sustainable returns from actual economic activity rather than circular incentives.

So if Cardano's DeFi has so far been a closed-loop liquidity game of capital circling within web3, I think RealFi is a fresh starting point for connecting on-chain capital to the real economy.

What I *can* do is share what steps *I* took to ensure my funds were safe.

The website below was built by someone I trust. It connects to your wallet, reads your wallets public addresses, and scans publicly available data to determine if those addresses are impacted.

https://t.co/aI5GZBHdqe

I connected each of my wallets to this to see which were impacted. For most of them, no private key was leaked, and the safest thing for me to do was to disable the SecondFi app and wait for the bug to be patched.

For one wallet, which I use for testing, it identified that the key was already leaked, and funds were at risk. I recovered my seed phrase into another wallet (Eternl), created a *second* brand new account. I then sent all funds (including native tokens) from the compromised wallet to the new wallet. I reviewed the transaction carefully, including all "outputs", to make sure there was no "change address" returning funds back to the first wallet, which could have put them at risk of being swept by an attacker.

SecondFi (formerly Yoroi) — for those wondering 'What happened? What should I do?', we added a simple key points explanation page.
✅ Not everyone is affected — EMURGO has secured the funds and is returning them
👉 Submit a ticket at https://t.co/JX88chMDPA and then wait
⛔ Do not perform recovery or signing; anyone asking for your key or recovery phrase is a scam.
🔗 https://t.co/LquZm3WY2M
 (unofficial community self-help guide).