Over $1M Stolen in Exploit Targeting Solana-Based Neobank Avici
An attacker has drained more than $1 million in SOL from users of Solana neobank Avici amid card balance withdrawal vulnerabilities.
Attackers have siphoned over $1 million worth of tokens from users of Avici, a neobanking platform operating on the Solana blockchain. On-chain records confirmed that the exploiter's address amassed more than 10,005 SOL through unauthorized card balance withdrawals.
The incident stems from a vulnerability affecting the protocol’s card withdrawal mechanism, allowing the attacker to continuously extract user balances. Avici publicly acknowledged issues regarding debit card withdrawal functions several hours after malicious activity commenced.
The breach casts a spotlight on security risks inherent in hybrid crypto-banking products that bridge decentralized protocols with debit card infrastructure. Security audits and withdrawal controls across Solana-based fintech apps are expected to face heightened scrutiny.
Key takeaways
- Avici card withdrawal vulnerability results in over $1M SOL drained
- Attacker wallet accumulated over 10,005 SOL during the ongoing incident
- Highlights operational risks in bridging on-chain wallets with consumer card rails