$1.1M Drained From Solana Users as Attacker Exploits Outdated Rain Contract

An exploit of an outdated Rain Solana contract drained $1.1 million from users across multiple programs on August 28.

The attacker targeted collateral accounts controlled by onchain contracts, which are separate from personal wallets.

According to Blockaid, the attacker reused a signature to bypass the requirement for two separate approvals, allowing it to withdraw USDC and USDT from individual accounts.

The stolen funds were sent to one Solana wallet and later swapped for SOL using decentralized exchanges. The money was then transferred to Tornado Cash on Ethereum, where it was mixed with other deposits.