Ethereum L2 Abstract hit by wallet drain, ties to Cardex suspected

Ethereum layer-2 (L2) platform Abstract is investigating a wallet drain issue after some users reported compromised accounts, following a major milestone for the project’s Abstract Global Wallets (AGW).

Abstract Chain developer 0xBeans took to X on Feb. 18 to report that “some Abstract users” had been compromised.

The developer emphasized that the issue was “not a global AGW issue” but rather isolated to a specific application, pointing at a potential breach in the Abstract-based game Cardex.

“Seems to be Cardex, please do not interact for the time being,” 0xBeans wrote.

Abstract has just deployed 1 million AGW wallets

The issue came the next day after another member of the Abstract Chain team, 0xCygaar, reported on Feb. 17 that it had deployed more than 1 million AGW wallets.

“We’ve done more than almost anyone else in the space to bring on the next generation of smart wallets,” 0xCygaar said, adding: “We’re just starting.”

Following the issue, 0xCygaar reiterated that the drain was related to Cardex, and urged users to revoke their sessions.

“This is not an issue with AGW’s contracts. There is no exploit with wallet functionality. This specific issue is related to negligence on the app regarding session key management,” he stated, adding:

“Our contracts have been audited multiple times. We had our session key module looked at specifically. These reports will be available shortly.”

This is a developing story, and further information will be added as it becomes available.