Outdated Rain contract flaw drains $1.1 MILLION from Solana card programs; AVICI drops 49%
In August 2026, multiple Solana card programs were hit by a hack tied to a Rain contract vulnerability, with total losses of $1.1 million. Avici was the hardest hit, with 1,685 users losing $500,800. The attacker swapped the stolen stablecoins for SOL, bridged the funds to Ethereum, and routed them through Tornado Cash. Avici said self-custodial wallets were not affected and that all compromised card balances will be fully refunded.