Solana Card Program Vulnerability Affects 1,685 Users
A vulnerability in a Solana-based card program's contract has affected 1,685 users, causing $500,859.22 in losses.
The incident involved Avici's card-issuing partner Rain identifying a vulnerability in a version of the Solana card contract used to hold user card balances.
According to Avici, the issue was confined to a single smart contract and did not impact users' self-custodial wallets, which hold funds on both Solana and EVM chains.
The company has since upgraded all programs and reported no further unauthorized activity after the fix.