A Cardano Hack Paused a Big Airdrop — Here’s Why Your NIGHT Tokens Are Safe

If you’re one of the many Cardano holders waiting on a NIGHT token airdrop, here’s some good news: the Midnight Foundation has reopened the redemption portal for its “Glacier Drop” program after a security scare that had nothing to do with your tokens directly, but forced a temporary pause anyway. The Foundation says a full review found its systems were never touched, and everyone eligible can now claim any tokens that finished “thawing” while the portal was closed.

What actually happened, in plain English

The trouble started elsewhere. A separate platform called SecondFi suffered a breach in which hackers reportedly stole around 16 million ADA — Cardano’s native coin — from hundreds of connected wallets, according to Blockonomi. Because Midnight’s Glacier Drop program is closely tied to the Cardano ecosystem, the Foundation decided to pause redemptions on its own portal just to be safe while it checked whether the exploit had spread to its infrastructure.

That’s a smart, cautious move worth noting: when something goes wrong on one part of a blockchain’s ecosystem, responsible teams often lock things down temporarily to rule out contagion, even if their own code wasn’t the problem. After completing its review, the Midnight Foundation said it found no evidence that the SecondFi breach reached its systems, and that the redemption platform stayed isolated from the affected wallets throughout.

What is the Glacier Drop, and why does it matter to you?

For anyone new to this, the Glacier Drop is a phased airdrop of NIGHT tokens rolled out to eligible participants in four quarterly chunks, each releasing 25% of someone’s total allocation. The first window ran from December 10, 2025 to March 9, 2026, and the second from March 10 to June 7, 2026 — both completed without issues, according to the Foundation.

The program is now in its third phase, running from June 8 to September 5, 2026, with a fourth and final window scheduled from September 6 to December 4, 2026. Redemptions on the portal resumed on June 9, and the Foundation confirmed the overall schedule hasn’t shifted at all despite the brief shutdown — so if you’re expecting tokens later this year, the timeline you were already tracking should still hold.

If you used SecondFi, this part is for you

It’s worth being clear about who this guidance actually applies to. The Midnight Foundation stressed that its advice to follow SecondFi’s recovery steps is aimed only at users whose wallets were connected to that platform — not at Glacier Drop participants in general. If you never touched SecondFi, there’s nothing extra you need to do on your end.

For those who were affected, SecondFi has rolled out what it calls a “Quarantine Mode” to lock down compromised accounts, with a secure wallet export tool expected the following week and a further recovery phase possible depending on how the investigation and asset-tracing efforts go. In a public post, SecondFi acknowledged some users hadn’t finished securing their hardware wallets and told less technical users to sit tight for the export tool rather than attempt fixes on their own.

Why this is a useful reminder for every crypto holder

Even if you have zero connection to Midnight, SecondFi, or Cardano, this episode is a handy real-world example of how ecosystem-wide caution works. One project’s breach can freeze activity on completely separate platforms for days while teams check for spillover — which is annoying if you’re waiting on funds, but far better than the alternative of projects staying open and hoping for the best.

The bigger takeaway for everyday holders: airdrops, redemptions, and token unlocks can get paused without your allocation actually being at risk. If you’re ever caught in a similar freeze, the key questions to ask are whether the project has confirmed a completed security review, whether your specific wallet or account was named as affected, and whether the original distribution schedule has changed. In Midnight’s case, the answers so far are reassuring — but always wait for an official confirmation rather than assuming your funds are fine.