Ctrl Wallet Shuts Down After Cardano-Linked Exploit, Leaving 650,000 Users to Recover Funds Independently
Key Takeaways
- •Ctrl Wallet disabled all core functionality including sending, receiving, swapping, and dApp connectivity starting August 3, 2026, with only recovery phrase export still available.
- •The shutdown stems from a June 23, 2026 security exploit affecting Cardano-linked wallets, after which the company chose permanent closure over resuming operations.
- •Formerly XDEFI Wallet, the platform supported over 2,500 blockchain networks and reported more than 650,000 monthly users before its discontinuation.
- •Users retain access to their funds by importing their recovery phrases into another compatible self-custodial wallet, as Ctrl never controlled user private keys.
- •The company confirmed there will be no migration tokens, airdrops, refunds, or compensation programs and warned customers to be vigilant against phishing scams impersonating the closure.

Self-custodial crypto wallet Ctrl Wallet has shut down its core services, leaving users to move their digital assets or back up recovery phrases before the application stops functioning entirely. The company has not specified an exact cut-off time for when the app will become inaccessible.
Starting August 3, 2026, users can no longer send or receive cryptocurrencies, swap tokens, or connect to decentralized applications through the wallet. The only remaining feature is the ability to export a 12- or 24-word recovery phrase, which can be imported into another compatible wallet to regain access to funds. Because Ctrl is a self-custodial wallet—meaning users, not the company, control their private keys—funds remain accessible as long as users hold their recovery phrases, even though the application itself is going offline. Ctrl has warned that it cannot guarantee how long the application will remain functional on users' devices and has urged customers to export their recovery phrases without delay.
The shutdown follows a security incident disclosed on June 23, 2026, which affected a small number of Cardano-linked wallets. The company initially placed parts of the platform into maintenance mode but ultimately chose to discontinue the wallet entirely rather than resume operations following the exploit. The decision highlights the operational risk that even non-custodial wallets can face when infrastructure-level vulnerabilities are discovered, since the wallet provider still maintains the software and browser extensions that users interact with.
Formerly known as XDEFI Wallet, the platform rebranded to Ctrl Wallet in July 2024 as part of a broader effort to position itself as a universal self-custody wallet. The platform grew to support more than 2,500 blockchain networks and reported over 650,000 monthly users, making it one of the larger multi-chain browser wallets competing with MetaMask and Phantom. Its closure removes a notable multi-chain alternative from a market segment where a small number of wallets dominate browser-based decentralized application access.
Key milestones in the wallet's history include its original launch as XDEFI Wallet to serve decentralized finance users across multiple blockchains, its 2024 rebrand to Ctrl Wallet, and its April 2026 integration into the Emurgo ecosystem, where its multichain technology was intended to continue through the SecondFi wallet. Emurgo is one of the three founding entities behind the Cardano blockchain. That transition was subsequently followed by the June 2026 Cardano-related exploit and the July 2026 announcement that the wallet would be permanently discontinued.
Ctrl has also warned users that there is no migration token, airdrop, refund, or compensation program associated with the closure. The company cautioned customers to be wary of scams claiming to offer methods to recover funds—a common risk following high-profile wallet closures, as bad actors frequently impersonate defunct projects through phishing sites and fake support channels. Users who have backed up their recovery phrases can still access their assets by importing them into another compatible self-custody wallet.