Avici attack drains over $1M from Solana users

An ongoing attack against Solana-based crypto card platform Avici has reportedly drained more than $1 million from user collateral accounts while sending its AVICI token to an all-time low. Summary The suspected attacker held 10,005 SOL and about $11,600 in stablecoins at one checkpoint. On-chain records showed repeated calls that added an administrator before collateral withdrawals. Avici acknowledged a card balance withdrawal issue but did not confirm the reported loss. AVICI fell 49.4% within 24 hours and touched a record low of $0.2175. Avici attacker adds administrators before withdrawals According to reports, the suspected attacker had collected 10,005.03 SOL, worth about $1.07 million at 18:58 UTC, along with approximately $11,600 in USDC and USDT. Its analysis was based on Solana transaction logs and RPC data gathered while the attack was still underway. The wallet received its initial funding through deBridge at 13:40 UTC, when 1.79 SOL arrived from another network. After remaining inactive for about three hours, the address made its first call involving Avici’s programs at 16:49:48 UTC. Transaction logs reviewed by the publication showed the same three-step process across...