Rain's Solana-Based Card Infrastructure Hit with Unauthorized Access

A Solana-based card infrastructure run by Rain came under external attack on August 28th (UTC), resulting in the theft of funds from card balances at partner neobanks Avici and Tria.

Damage was confirmed at Avici, where $500,859.22 (approximately ¥80 million) was fraudulently withdrawn from the card balances of 1,685 users.

The attack exploited a vulnerability in Rain's legacy contract for card balance management, which had not been properly deprecated and left operational.

Rain explained that some partners, including Avici, were still operating the legacy versions of the Solana contract.