$1.1 Million Stolen from Solana Programs via Exploited Rain Contract

A $1.1 million heist occurred on August 30, 2026, targeting several Solana-based programs, including Avici and Tria.

The attacker exploited a loophole in an outdated Rain card contract to drain funds from these programs.

Avici suffered losses of $500,800, affecting over 1,600 users, while Tria lost $430,000 with 636 users impacted.

Rain has since upgraded its card programs to fix the issue, but not before the attacker swapped stablecoins for SOL and moved them to Ethereum using Tornado Cash.