Solana Contract Exploit Drains $1.1M from Crypto Card Platforms

A Solana-based crypto card platform vulnerability has led to a $1.1 million theft, causing significant losses for users of Avici and Tria.

The security weakness in a legacy contract was identified by Rain, the infrastructure provider, which immediately upgraded its platforms, but not before the attacker exploited it.

Avici suffered the largest losses, with $500,800 drained from 1,685 cardholders' accounts. The platform has committed to fully reimbursing affected customers and submitted a complaint to the FBI's Internet Crime Complaint Center.