Avici's Solana card contract vulnerability exposed 1,685 users and $500,859 in card balances; partner Rain identified and patched the flaw, with full refunds promised.
Security & Exploits ·
A vulnerability in Rain's stablecoin debit card contract affected Avici and other neobank programs, compromising card balances held in a separate Solana contract. The breach impacted 1,685 Avici users who lost $500,859.22 in card balances, while funds in Avici's self-custodial wallets remained unaffected. Rain identified and upgraded the vulnerable contract, and Avici committed to refunding all affected card balances in full and reported the incident to the FBI's Internet Crime Complaint Center.