Attackers stole almost $400,000 in tokens through Abstract-based Cardex app

Abstract's L2 security team discovered a "session key breach" in the Cardex app, which launched on February 11, 2025, that resulted in unauthorized access to nearly $400,000 in tokens from users.