$1.1M Hack Targets Neobank Users on Solana-Based Platforms

A $1.1 million hack has drained funds from multiple Solana-based programs, targeting users of neobanks Avici and Tria.

The attack exploited a vulnerability in an outdated Rain card contract, allowing the attacker to repeatedly submit a signed authorization and add themselves as administrators to individual card-collateral accounts.

Rain upgraded all affected programs after detecting the flaw, but the damage was already done. Avici reported losses of $500,800 across 1,685 users, while Tria lost over $430,000 with 636 users affected.

The AVICI token plummeted to a record low of $0.217, down 49% from its 24-hour high. The company has pledged to refund every affected card balance and filed a report with the FBI's Internet Crime Complaint Center.