Rain Solana Vulnerability Hits Over 2,321 Users, Sparking Security Concerns

Tria and Avici have reported that over 2,321 users were affected by a vulnerability in Rain's Solana infrastructure, leading to unauthorized withdrawals from card balances. The incident occurred on August 28 and primarily impacted Solana USDC and USDT assets transferred into Tria card balances.

Rain's monitoring systems identified the issue after discovering that live programs were still using an outdated contract version. This vulnerability allowed unauthorized access before collateral was withdrawn, according to security firm SlowMist.

Tria reimbursed 636 affected users with a combined loss of $431,945 and provided an additional 10% compensation for each user. Avici reported that its own self-custodial wallets remained untouched, but 1,685 users had $500,859.22 in card balances affected by the same issue.

Rain has not disclosed total losses across all affected programs or published a complete technical post-mortem, leaving uncertainty about the scope of the incident.