$1.1M Rain Contract Exploit Exposes Vulnerabilities in Shared Card Infrastructure

An attacker exploited an outdated Rain contract on August 28, draining approximately $1.1 million from multiple stablecoin card programs operating on Solana.

The affected crypto neobanks included Avici and Tria, which reported combined losses of over $932,800 across 2,321 users.

Rain's monitoring systems discovered a vulnerability affecting a 'small number' of programs using an outdated version of its Solana card contract, prompting the company to upgrade every affected program.