Avici: Solana Card Contract Vulnerability Affects Approximately $500.9K in Card Balances; Affected Users to Receive Full Refunds

On August 29, Avici stated that its card partner Rain discovered a vulnerability in a version of the Solana card contract used by Avici and a few other projects. The relevant contract has now been upgraded, and no further unauthorized activity has been detected so far. Avici noted that user wallets and card balances are independent, and funds in Solana and EVM wallets are unaffected; this only impacts the separate Solana contract used to hold card balances.

Current reconciliation shows that 1,685 users are affected, involving card balances of $500,859.22, and all affected users will receive full refunds.

[TechFlow]