A security exploit in crypto card infrastructure drained roughly $1.1 million from several Solana-based programs, triggering a sharp sell-off in Avici’s AVICI token. The token fell as much as 49%, dropping from a 24-hour high of about $0.43 to a record low near $0.217 before recovering some losses.<\/p>\n\n\n\n
The incident has raised fresh concerns about security risks in crypto payment infrastructure, particularly where self-custody systems rely on third-party contracts to process card spending.<\/p>\n\n\n\n
The attack targeted an outdated Rain card contract used by Avici and other programs. The vulnerability allowed the attacker to gain administrative control over individual card-collateral accounts and withdraw their balances.<\/p>\n\n\n\n
Avici said about $500,800 was taken from 1,685 users. The company said the breach affected funds held for card spending, while users’ self-custodied wallets remained unaffected.<\/p>\n\n\n\n
Another crypto neobank, Tria, reported losses exceeding $430,000 involving 636 users. Its token also fell more than 10% after the incident.<\/p>\n\n\n\n
Avici and Tria both pledged to fully reimburse affected users. However, neither company has disclosed a final timetable for the repayments.<\/p>\n\n\n\n
Rain said it identified the problem in an outdated version of its card contract and upgraded programs still using the affected version. The company reported no additional unauthorized activity after the upgrades.<\/p>\n\n\n\n
Blockchain transaction data showed the stolen stablecoins were converted into Solana’s SOL, moved across networks and eventually sent through Tornado Cash.<\/p>\n\n\n\n
The roughly $1.1 million traced on-chain exceeds the losses disclosed by Avici and Tria. That gap suggests other programs using the same infrastructure may also have been affected, although their identities and losses remain undisclosed.<\/p>\n\n\n\n
The incident highlights a key risk for crypto card users. Even when customers control their primary wallets, funds transferred into payment systems can become subject to separate third-party smart contracts.<\/p>\n\n\n\n
Avici said it reported the incident to the FBI’s Internet Crime Complaint Center. The breach comes as crypto card usage expands, increasing the importance of security controls across the payment infrastructure supporting digital assets.<\/p>\n","protected":false},"excerpt":{"rendered":"
A security exploit in crypto card infrastructure drained roughly $1.1 million from several Solana-based programs, triggering a sharp sell-off in Avici’s AVICI token. The token fell as much as 49%, dropping from a 24-hour high of about $0.43 to a record low near $0.217 before recovering some losses. The incident has raised fresh concerns about […]<\/p>\n","protected":false},"author":13,"featured_media":18609,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"_acf_changed":false,"footnotes":"","_members_access_role":[],"_members_access_error":""},"categories":[2,43],"tags":[],"class_list":["post-19498","post","type-post","status-publish","format-standard","has-post-thumbnail","category-featured","category-general-news"],"acf":[],"yoast_head":"\n