Digital Asset
Intelligence
Security Incident · ETH Ecosystem

Cardex Private Key Leak: $400.00K Reported Loss

·Historical incident record

Incident Overview

On February 18, 2025, Abstract discovered a security incident involving the Cardex app within The Portal, affecting approximately 9,000 wallets with a total loss of around $400,000 in ETH. A leaked key in Cardex's frontend code led to the compromise of the session signer wallet. Since this wallet was shared across all sessions, all users who had created sessions on Cardex were impacted.

Sources & References

Original incident referencehttps://x.com/0xCygaar/status/1891948692204368122 (opens in a new tab)

This record presents information attributed to the linked sources. Incident dates describe the original event, not a new report. Reported loss figures reflect the source record and are not current market valuations.

More Security Incidents

View All →
  1. Incident date
    Target

    BankX

    Attack methodContract Vulnerability
    Reported loss$ 43,000
  2. Incident date
    Target

    Zoth

    Attack methodPrivate Key Leakage
    Reported loss$ 8,290,000
  3. Incident date
    Attack methodContract Vulnerability
    Reported loss$ 13,000,000
  4. Incident date
    Target

    Bybit

    Attack methodSupply Chain Attack
    Reported loss$ 1,460,000,000
  5. Incident date
    Target

    Shaw

    Attack methodAccount Compromise
    Reported lossNot disclosed