Avici, Tria Users to Receive Full Refunds After Unauthorized Withdrawals Due to Solana Contract Vulnerability
A vulnerability was discovered in Rain's Solana-based card contract, which led to unauthorized withdrawals from user balances on Avici and Tria.
The affected programs, including Avici and Tria, have confirmed that all affected users' balances will be refunded in full, with an additional 10% cashback.
Rain identified the vulnerability as a result of using an outdated version of the Solana card contract. The company has since upgraded the contract across all programs to prevent future incidents.