$1.1M Stolen in Rain Contract Exploit on Solana

An attacker exploited an outdated contract on Rain's Solana platform to drain approximately $1.1 million from multiple card programs.

The attack occurred on August 28, with proceeds later entering Tornado Cash on Ethereum.

Rain said its monitoring systems discovered a vulnerability affecting a 'small number of programs' using an outdated version of its Solana card contract.

The company upgraded every program still running the affected version following the attack.