Avici Neobank Drained of Over $1M in Live Attack on Solana

The Attack Unfolds

An attacker drained more than $1 million from Avici user collateral accounts in a live assault on the Solana neobank. The wallet conducting the attack held 10,005 SOL at the time of reporting and continued withdrawing funds. Avici acknowledged the breach nearly two hours after the first drain transaction, stating it was "aware of an issue affecting card balance withdrawals" but did not immediately disclose the scope or cause.

Attack Mechanics

According to reports, the attacker added administrative privileges to the compromised account before initiating the withdrawal sequence. This suggests the breach involved either compromised credentials with sufficient permissions or a vulnerability in Avici's access control system that allowed privilege escalation. The timing and method indicate the attacker had sustained access to the platform's internal systems rather than exploiting a public-facing smart contract vulnerability.

Market Reaction

The AVICI token fell to an all-time low as news of the attack spread. The decline reflected both the immediate loss of user confidence and uncertainty about whether user funds could be recovered or frozen before further drainage. Avici did not immediately disclose a recovery plan or provide an updated total of compromised accounts.