Rain Card Exploit Drains $500,859 From Avici Users on Solana

Rain Card Contracts Compromised

An attacker drained $500,859.22 from the card balances of 1,685 users of Avici, a card-issuing neobank built on the Solana network, after breaching infrastructure operated by Rain, the stablecoin-collateral card platform that powers the service. The breach struck on August 28 and hit two Rain partners — Avici and the similar card provider Tria — though the damage was concentrated at Avici. Both firms confirmed that funds held in users' self-custodied Solana and EVM wallets were untouched: the theft was confined to the segregated contracts that store card spending balances, a structure in which users deposit stablecoins such as USDC or USDT into a dedicated contract that manages their spendable card limit.

On-chain security researchers assessing the incident say the attacker used forged signature data to set unauthorized admin privileges on users' card-balance contracts, then withdrew the funds. The exploitable weakness sat in legacy contract versions that had been left live instead of rotated. Rain has since completed updates to the affected contracts, halting the outflow, and attributes the breach to a vulnerability in its older Solana contracts — though a formal technical root-cause report has not yet been published, a gap we flag rather than paper over. Tria stated that Ethereum EVM assets on its card balances remained safe. Avici filed a report with the FBI's Internet Crime Complaint Center. The stolen funds were bridged to Ethereum — moving across mainnet rails rather than any Layer 2 route — and then routed to Tornado Cash in multiple transfers, per on-chain tracing. Criticism spread on social media that Circle did not freeze the stolen USDC. Rain, Avici and Tria have each pledged full reimbursement to affected users, but no payout schedule or funding source has been disclosed.

GOLD Memecoin Wipeout

While the card exploit unfolded, a separate Solana story was burning traders on the speculative side of the ecosystem. GOLD, a Solana-based memecoin, collapsed by more than 90% within a short window after a rapid run-up in its market capitalization, and on-chain data shows one address — Emxhs...euZMP — absorbed some of the sharpest losses. The address built a position of $72,700 while the token's market cap sat below $40 million, then added another $18,100 even after a related promotional post was deleted and theft rumors began circulating around the project. Its cumulative outlay exceeded $90,000, and the realized loss now stands at $82,400, leaving holdings 90.7% below the amount deployed.

The same monitoring window surfaced additional red flags. One user who bought near the top lost $62,100 in just seven minutes as liquidity evaporated — the kind of slippage that occurs when an automated market maker pool is one-sided and depth vanishes. More structurally, data circulating in the analysis community indicates the GOLD team controls 82.45% of the token's total supply, with the developer wallet holding 600 million tokens. A distribution this concentrated means a single seller can flatten the price, and the monitor itself cautions that address-level data shows trading behavior without confirming the holder's intent. The lesson is less about direction and more about structure: on fast-moving tokens, checking holder concentration and pool depth matters more than any narrative. Readers tracking the market in real time can follow live spot and futures prices on Bybit.

Solana Consumer Risk in Focus

Taken together, the two incidents sketch the same arc from opposite ends of the risk spectrum: Solana's consumer layer is scaling faster than its operational safeguards. The card breach is verifiable on-chain — the drained amount is fixed and the proceeds are traceable to Tornado Cash — yet the definitive post-mortem from Rain is still outstanding, and reimbursement terms remain undefined. On the memecoin side, a 82.45% team-controlled supply did what concentrated supplies do. Our reading: custody architecture and token distribution audits are now the two diligence checks that matter most before retail capital touches Solana's consumer rails.