UPDATE: All affected card balances will be refunded in full
Earlier today, our card-issuing partner, Rain, identified a vulnerability in an version of a Solana card contract used by Avici and a small number of other programs. The contract has now been upgraded across all programs, and no further unauthorised activity has been observed.
Avici wallets and card balances are separate. Avici wallets are self-custodial and remain under users’ control.
When users top up their cards, funds move into a separate Solana contract that holds their card balance. Only this contract was affected.
Note: Funds held in Avici’s Solana and EVM wallets are safe and were not affected.
Our current reconciliation shows that 1,685 users were affected, representing $500,859.22 in card balances.
Every affected user will have their card balance refunded in full. We remain in close contact with our card-issuing and security partners and are monitoring the remediation closely.
Avici has also filed a report with the FBI’s Internet Crime Complaint Center. We are deeply sorry for the concern and inconvenience this has caused.
Earlier today, Rain’s monitoring systems discovered a vulnerability impacting a small number of programs using an outdated version of our Solana contracts. Other programs were not impacted. Rain immediately launched an investigation to determine the full scope of the situation.
Our team has successfully upgraded all programs that were using the outdated version of the Solana contracts, which has resolved the situation. Rain is continuing to monitor the issue, has engaged third-party forensics experts to investigate, and will work with law enforcement and relevant regulatory authorities.
All affected users will be made whole. We’ve already begun the remediation process and are focused on delivering a swift and responsible resolution.
We’ve helped 15 startups raise $45,000,000 from over 137,000 people on the internet.
Now we want to help consumer app founders do the same. On top of giving them up to $10k/mo in marketing/ad spend!
DM me if you want to win
Highly recommend the talk by @pileks at 2:47:30 if you’re looking for a no bs take on production level @solana agentic development, even though he calls it vibing in the title.
Spoiler: no trace of AGI here. You still have to use your brain.
The GameByts ICO opens tomorrow at 9:00 UTC.
This ICO will use a time-weighted allocation mechanism that rewards early commitments.
See you in the books!
My perfect Sunday morning as a European alpha male:
8:30 - wake up alone, wife slept at her boyfriend's place
9:30 - cycle to Aldi to return plastic bottles
10:00 - arrive home, immediately log the 4 km bike ride in the carbon footprint tracking app
10:30 - perform a 25-minute restorative yoga flow
11:00 - read the updated version of the EU AI Act
12:00 - call the police on my neighbor for having a barbecue on a balcony
12:30 - eleven-step Korean skincare routine
13:00 - masturbate to an AI-generated picture of Greta Thunberg with giant breasts
I love those slow European summer mornings