cardex

ChainCatcher message, Abstract previously disclosed that the ecological application Cardex encountered a security vulnerability attack. After completing an initial security audit, its team accidentally exposed the private key of the session signer on its website's front end. In response, Cardex confirmed on platform X that it has been attacked in connection with the session key leak. They are currently working with the Abstract team to trace the flow of stolen funds and the recovery situation, and will disclose the details of the incident later.

ChainCatcher message, Abstract contributor cygaar responded on the X platform regarding some Abstract users being attacked:The issue is related to Cardex; if you have interacted with this application, please revoke the relevant Session;It is not an AGW contract issue; the wallet functionality has no vulnerabilities; this specific problem is related to the application's negligence in session key management;If you have never interacted with Cardex, your funds are safe;The contract has undergone multiple audits, and the session key module has been specifically reviewed; relevant reports will be released soon.

ChainCatcher message, developer 0xBeans posted on social media that some Abstract users have been attacked, but this may not be a global issue with the Abstract Global Wallet (AGW). The problem seems to exist only in a specific application (seemingly Cardex, please do not interact for now), and efforts are currently underway to determine the cause.To reiterate, this is not a global AGW issue, but rather a problem with a specific application, and updates will be provided later.