security
Vulnerability in Rain Crypto Card Program Leads to $1.1 Million Theft
A security flaw in an outdated Solana-based Rain contract enabled an attacker to steal approximately $1.1 million from several programs, including nearly $500,800 from 1,685 users of the Avici crypto bank. The attack involved gaining administrative rights and converting stolen funds into SOL and Ethereum.
AS1 News
RAIN
BANK
SOLAn incident involving Rain's infrastructure affected multiple applications, notably the crypto bank Avici. The attacker exploited a vulnerability through signed authorization to obtain administrative privileges and withdraw funds. Victims received compensation and a 10% cashback, with Rain covering the costs. Notably, self-custody wallets and fiat accounts remained unaffected. This breach highlights the inherent risks associated with crypto cards, where funds transferred to cards can become vulnerable to such exploits.
The breach exposes vulnerabilities in crypto card infrastructure, emphasizing the importance of security updates and risk management in crypto payment solutions.