Avici and Ajna Suffer Big Hits as Hacker Exploits Solana and Ethereum

Avici, a Solana-based neobank, has promised to refund all affected card balances after hackers exploited a flaw in its contract on August 28. The attack drained user funds and affected 1,685 users, totaling $500,859.22. Avici's card-issuing partner Rain identified the issue as a flawed version of the Solana card contract used by Avici and other programs.

The attacker called several functions to pull out funds, including SubmitSignatures on Avici's authorization program, AddCollateralAdmin on its collateral program, and WithdrawCollateralAsset. The attacking wallet ended up holding around $1.07 million in SOL and $11,600 in stablecoins.

Ajna, an Ethereum lending protocol, was also hit by the same run of exploits a day later, with losses totaling $775,000. Ajna confirmed it was investigating unusual movements and urged users to withdraw all funds and stop interacting with the protocol.