A vulnerability in an outdated Rain card contract drained roughly $1.1 million across several Solana-based programs. The incident included $500,800 from 1,685 Avici users and sent the AVICI token down as much as 49%. Avici said the breach did not affect self-custodial wallets and pledged full refunds.