Solana Card Program Avici Reveals Contract Vulnerability Affecting 1,685 Users

Solana-based card program Avici has disclosed a vulnerability in one of its contracts that affected 1,685 users and $500,859.22 in card balances.

The incident occurred when Rain, Avici's card-issuing partner, discovered a flaw in the contract used to hold user card balances.

Affecting only the contract, not self-custodial wallets, the issue was confined and limited to card balances. The separation between card balances and self-custodial wallets prevented further unauthorized activity after the fix.

Avici has filed a report with the FBI's Internet Crime Complaint Center and will refund all impacted users in full.