Avici to Refund $500,900 to 1,685 Users Following Solana Card Contract Vulnerability

Odaily Planet Daily reports that Avici announced that its card issuing partner, Rain, discovered a vulnerability today in an outdated Solana card contract used by Avici and a few other projects. The affected contracts have now been upgraded across all projects, and no further unauthorized activity has been detected. This incident only impacted the independent Solana contract used to hold card balances after top-ups; users’ Avici wallets and card balances were isolated from one another, and funds in both Solana and EVM self-custody wallets remain secure and unaffected. Upon review, a total of 1,685 users were impacted, with combined card balances totaling approximately $500,900. Avici has committed to fully reimbursing all affected users for their card balances and has filed a report with the FBI’s Internet Crime Complaint Center (IC3). Previously, it was reported that the native AVICI token of the crypto-banking project Avici appeared to have been hacked, resulting in losses of approximately $1.02 million. The attacker transferred 10,000 SOL to another wallet and exchanged them for approximately $1.02 million in USDC, followed by cross-chain operations to convert the funds into approximately 418 ETH.