Crypto
Home›Crypto›Market Structure›Exploit drains $500,859 from Rain-linked Solana card b…
Exploit drains $500,859 from Rain-linked Solana card balances
Rain said it identified a vulnerability in an outdated Solana contract used by a small number of programs, and both companies will refund affected users in full.
An attacker exploited an outdated Solana contract tied to Rain, the card issuer behind Avici's Visa product, draining $500,859.22 from the card balances of 1,685 users on Friday, The Defiant reported. Rain and Avici said affected users will be refunded in full.
Rain said its monitoring systems detected a vulnerability impacting a small number of programs that were running an outdated version of its Solana contracts. Rain also said it upgraded every program running that version, and Avici said its self-custodial wallets were not touched, with the drained funds held in a separate contract used to store balances users top up.
Onchain records cited by The Defiant show the attacker withdrew the equivalent of more than the reported amount, including a single transfer of 10,000 SOL, valued at about $1.07 million at the time. Rain said it has engaged third-party forensics experts, will work with law enforcement and relevant regulatory authorities, and Avici filed a report with the FBI's Internet Crime Complaint Center.
The Defiant also described transaction patterns around the exploit, including calls that registered the attacker as an administrator on a user's collateral account before withdrawing collateral assets. Rain settles card transactions with Visa in stablecoins, and the wallet behind the drain was funded with 1.79 SOL bridged through deBridge, before becoming active against the card contracts later that day.
Latest closeSolana $104.30 ▼4.5%