Cloudflare Pages Function. Endpoints: POST /login {message,signature}, GET /me?token=.
Stand-in for a dApp that authenticates by verifying a signature over a static login message.
Not part of the wallet vulnerability — it only demonstrates downstream impact of the leaked signature.