Bitget App
Trade smarter
Buy cryptoMarketsTradeFuturesBotsEarnCopy
This Time Hackers Attacked Through a Game! Hundreds of Ethereum (ETH) Were Compromised! Here Are the Details

This Time Hackers Attacked Through a Game! Hundreds of Ethereum (ETH) Were Compromised! Here Are the Details

BitcoinsistemiBitcoinsistemi2025/02/19 16:55
By:Utku Yanık

A security breach has led to the exposure of $400,000 worth of Ethereum (ETH) from 9,000 user wallets.

A major security breach in the Abstract Layer 2 blockchain has led to the exposure of $400,000 worth of Ethereum (ETH) from 9,000 user wallets, according to an initial due diligence report published by Abstract.

Cardex Exploit $400,000 in Hacker Attack from 9,000 Wallets

The attack, which was detected early, was described as a “session key attack,” in which a malicious hacker gained access to user wallets that interact with Cardex, a blockchain-based game running on Abstract.

How Did the Attack Happen?

The hack was reportedly caused by a leaked key in Cardex’s front-end code, which compromised a shared session signer wallet used by all Cardex players.

The hacker attempted to:

  • Effectively stealing ETH by performing transactions on behalf of users.
  • Selling user assets, although ERC-20 tokens and NFTs are unaffected.

The preliminary investigation highlighted that the attack was not caused by a flaw in Abstract’s core blockchain or Global Wallet (AGW), but rather by Cardex’s poor security management in handling session keys.

Session keys are used to enhance the user experience by allowing applications to create temporary and limited access to wallets. However, improper security practices, such as exposing critical credentials, can lead to breaches like this.

The attacker gained unauthorized control over user wallets by exploiting Cardex's mismanagement of session keys.

Abstract's Response and User Advice

Abstract has taken immediate steps to reduce the risk:

  • It urged users to cancel active sessions with Cardex.
  • Abstract's portal has announced mandatory security audits for all projects using session keys.
  • The core Abstract network has been confirmed to remain secure.

*This is not investment advice.

1

Disclaimer: The content of this article solely reflects the author's opinion and does not represent the platform in any capacity. This article is not intended to serve as a reference for making investment decisions.

PoolX: Locked for new tokens.
APR up to 10%. Always on, always get airdrop.
Lock now!

You may also like

Core Scientific Nets $580M in Q1 Despite Revenue Miss, Eyes AI and HPC Future

Nasdaq-listed Bitcoin miner Core Scientific Inc. has reported a net income of $580 million for the first quarter of 2025, more than double the $210 million recorded during the same period last year. However, the firm fell short of analyst expectations for revenue, signalling the growing impact of industry shifts and operational transformation.

DeFi Planet2025/05/09 12:00
Core Scientific Nets $580M in Q1 Despite Revenue Miss, Eyes AI and HPC Future

SEC Settles Lawsuit with Ripple and Executives

Bitcoininfonews2025/05/09 10:00
SEC Settles Lawsuit with Ripple and Executives