Crypto Card Breach Drains $1.1M from Avici and Others

A recent attack on crypto card programs drained over $1.1 million from Avici and other users, with the firm's token dropping by as much as 49% in a single day.

The breach occurred due to an outdated contract version of the Rain card infrastructure, which was still live despite being flagged as vulnerable by monitoring systems.

A total of $500,800 was drained from 1,685 Avici users, with the remainder flowing into other programs using the same outdated contract. The affected funds were eventually laundered through crypto mixer Tornado Cash and converted into Solana (SOL).

Avici has pledged to refund its affected users and has filed a report with the FBI's Internet Crime Complaint Center.