Avici Hack Exceeds $1M as Stolen Funds Funnel through Tornado Cash

The Solana-based neobank Avici has fallen victim to a hack that has resulted in losses exceeding $1 million. The attacker exploited vulnerabilities in smart contract permissions and signature verification, allowing unauthorized withdrawals of funds.

Onchain Lens tracked the movement of funds, revealing that the hacker converted 10,000 SOL into 1.02 million USDC and then bridged the assets to Ethereum before depositing them into Tornado Cash, a crypto mixing service often used for money laundering.

The use of Tornado Cash indicates a deliberate attempt to obfuscate the trail, making it difficult for law enforcement and blockchain analytics firms to track the stolen funds. Security experts point to weaknesses in Avici's smart contract permission controls as likely entry points for the attack.