Avici Reports $500K Exploit
A security incident on Solana impacted card issuer Rain and neobank Avici, resulting in the loss of $500,859 across 1,685 user accounts, according to a report by The Defiant. The exploit targeted card balances linked to an outdated version of a Solana contract deployed by Rain, rather than Avici proprietary wallet code.
Onchain data indicates that the exploiter transferred 10,000 SOL, valued at approximately $1.07 million, suggesting multiple programs were affected by the vulnerability. Both Avici and Rain confirmed that self-custodial wallets remained secure during the incident.
Rain announced that it has updated all programs running the vulnerable version, engaged third-party forensics specialists, and coordinated with law enforcement. Avici confirmed that it filed an official report with the Federal Bureau of Investigation Internet Crime Complaint Center. Both organizations stated that all impacted users will receive full refunds.
Based on reporting by thedefiant.io.
