Avici to refund $500K after Solana card contract vulnerability

Avici said it will fully refund users affected by a vulnerability in a Solana card contract that impacted $500,859.22 in card balances.

The company said its card issuing partner Rain identified the vulnerability earlier Friday in a version of a Solana card contract used by Avici and a small number of other programs. 

The contract has since been upgraded across all affected programs, with no further unauthorized activity observed.

According to Avici, 1,685 users were affected. The company said every affected user will receive a full refund of their card balance.

Avici said its wallets and card balances operate separately. Its Solana and EVM wallets are self custodial and remained under users’ control throughout the incident.

Funds moved into a separate Solana contract when users topped up their cards, and Avici said only that contract was affected.

The company said it remains in contact with its card issuing and security partners while monitoring the remediation. Avici has also filed a report with the FBI’s Internet Crime Complaint Center.

Disclosure: This article was edited by Editorial Team. For more information on how we create and review content, see our Editorial Policy.