Rain Contract Exploit Drains $1.1M from Solana Card Users

An attacker exploited an outdated contract on Solana, draining $1.1 million from multiple stablecoin card programs operated by Rain in August.

The security company Blockaid identified approximately $932,800 in losses across Avici and Tria, two affected crypto neobanks.

Rain provided infrastructure for the cards, allowing users to fund their balances with stablecoins. The deposited assets moved into collateral accounts managed through onchain contracts.

The attacker bypassed withdrawal controls by manipulating a signature verification instruction in the outdated contract.