Solana-Based Avici Suffers $670,000 Security Breach

Avici, a next-generation banking platform within the Solana ecosystem, has suffered a significant security breach. According to on-chain data, an attacker began withdrawing funds from user accounts at around 16:49 UTC.

The attack was launched with only $190 in initial capital, which was used to cover transaction fees. The attacker's wallet processed over 8,857 transactions and withdrew approximately $576,000 from Avici users' accounts without authorization.

Investigations revealed that the attack stemmed from an authorization flaw in Avici's smart contracts. The attacker gained control over more than 1,100 collateral accounts and began withdrawing funds from these accounts.

The median amount stolen per account was approximately $24, while the largest single loss was $5,268. The total loss is estimated to have reached around $670,000.