Solana-Based Avici Suffers Ongoing Attack, Over $1 Million Stolen From Users

Solana-based neobank Avici has been hit by a continuing attack that has stolen more than $1 million from users. According to ChainCatcher, the attacker wallet holds 10,005.03 SOL and about $11,600 in USDC and USDT. The attack pattern involved calling Avici's authorization program SubmitSignatures, then the collateral program AddCollateralAdmin, and finally WithdrawCollateralAsset to drain balances. Both Avici programs are upgradeable and share a single standard Solana account rather than multisig upgrade authority. Avici confirmed the issue 1 hour and 53 minutes after the first theft transaction, saying it was aware of a problem affecting card balance withdrawals and was working directly with relevant partners to resolve it. Users had already reported stolen balances on social media. An anonymous on-chain analyst, STACC, said a real-time tracker identified 125 different sending accounts, with transfers ranging from about 9 USDC to more than 26,000 USDT. AVICI fell 49.4% in the past 24 hours to $0.2175, giving it a market value of about $2.84 million and marking a record low. Avici raised funds through MetaDAO in October 2025, with an initial cap of $3.5 million, final commitments reaching $34.2 million, and the team returning 89.8% of committed USDC.