Security

Read-only by design

AbsBoard uses a wallet address and game sign-in messages to read tracking data. Sync does not request asset transfers, token approvals, or a seed phrase.

Wallet safety

Review every Abstract Wallet prompt. A normal AbsBoard sync is a sign-in message, not a transaction. Reject any unexpected transaction or approval request.

Stored sessions

Game sessions are encrypted at rest. Telegram links use short-lived, one-time tokens and can be disconnected from the bot.

Report a vulnerability

Send the affected URL, reproduction steps, impact, and a safe proof of concept to the official Telegram bot. Avoid accessing another user's data.

Report privately

Official origin

Only connect through https://absboard.xyz. Check the full domain before signing a wallet message.