Rain stablecoin debit card contract vulnerability affected Avici and other neobank programs, resulting in $500k losses for 1,685 users; Avici committed to full refunds.
Security & Exploits ·
A vulnerability in Rain's stablecoin debit card contract affected Avici and other neobank programs, compromising card balances held in a separate Solana contract. The breach impacted 1,685 Avici users who lost $500,859.22 in card balances, while funds in Avici's self-custodial wallets remained unaffected. Rain identified and upgraded the vulnerable contract, and Avici committed to refunding all affected card balances in full and reported the incident to the FBI's Internet Crime Complaint Center.