Avici: Solana Card Contract Vulnerability Affects Approximately $500,900 in Card Balances; Affected Users Will Receive Full Refunds
Avici stated that its card-issuing partner, Rain, discovered a vulnerability in a specific version of the Solana card contract used by Avici and a few other projects. The relevant contracts have since been upgraded, and no further unauthorized activity has been detected to date. Avici clarified that user wallets and card balances are independent, meaning funds in Solana and EVM wallets remain unaffected; this incident only impacted the isolated Solana contract designated for storing card balances. Current reconciliations indicate that 1,685 users were affected, involving card balances totaling $500,859.22. All affected users will receive full refunds.
