RAIN (Raincards) disclosed a vulnerability in outdated Solana contracts affecting a small number of neobank programs; affected users will be compensated.
Security & Exploits ·
Rain identified a vulnerability in outdated versions of its Solana contracts that affected a limited number of neobank programs, according to the project. Other programs using the contracts were not impacted. The issue was detected through Rain's monitoring systems and prompted an immediate investigation into its scope.
Rain said it upgraded all affected programs to resolve the vulnerability. The project has also engaged third-party forensics experts to examine the situation and is working with law enforcement and regulatory authorities. Rain stated that all users impacted by the vulnerability will be compensated, with the remediation process already underway.
It remains unclear how many users or programs were ultimately affected, what the vulnerability's technical nature was, and whether any funds were lost or moved before the upgrades were deployed. The outcome of the forensics investigation and regulatory engagement has not yet been disclosed.