Leaderboard
818All-time rank
C
Cardex
Feb 18, 2025
$400K
Lost
$400K
Recovered
$0
Net loss
$400K
Unrecovered0% recovered
On February 18, 2025 Cardex (fantasy trading card game on Abstract layer-2) suffered a session key compromise affecting approximately 9,000 wallets when a session signer private key was exposed on the frontend, allowing attackers to impersonate all active user sessions and drain approximately $400,000 from users who had approved session keys.
- Target
- DeFi
- Classification
- Input Validation
- Technique
- Signature Verification Flaw
- Attribution
- Unknown
- Chains
Abstract
Event timeline
- Feb 18, 2025Exploit executed — $400K drained via signature verification flaw
- Attributed to Unknown
- Recovery status Unrecovered 0%