Avici says, ‘everyone’s card balance refunded in full’ as Rain fixes crypto card vulnerability

Avici, the crypto neobank that suffered a $500K hack, has pledged to fully repay victims.

Additionally, the firm assured its users that the vulnerability that enabled the exploit has been resolved by its card-issuing partner, Rain. 

Over 1600 Avici victims to be refunded

In an update on the 28th of August, Avici said that 1,685 users were affected by the incident. This translated to $500,859.20 in impacted card balances. The firm added, 

Every affected user will have their card balance refunded in full. We remain in close contact with our card-issuing and security partners and are monitoring the remediation closely.

Separately, Rain reinforced the full repayment process, noting that the bug impacted a “small number of programs” that were using an outdated version of their Solana contracts. 

Can the crypto card sector survive a contagion?

However, the incident has also increased scrutiny on crypto card players and broader safety amid rising stablecoin adoption. 

For clarity, Avici wallets are self-custodial. However, its card balances are separate. Whenever a user tops up their cards, the funds are transferred into a separate Solana contract that holds the card balance. 

So Avici’s card balances were the only ones affected due to a bug in a codebase being managed by Rain. But the funds in Avici wallets are reportedly safe and under users’ control.