Avici has pledged full refunds to all 1,685 users affected by an August 28 breach that drained $500,859.22 from card balances. 

The Solana-based neobank said its card-issuing partner Rain traced the incident to a flawed version of a Solana card contract used by Avici and “a small number of other programs” before being upgraded. The incident was followed by Ajna’s exploit one day later.

Avici Promises Full Repayment After Card Exploit

In an August 28 post on X, Avici said, “All affected card balances will be refunded in full.” The company confirmed that the compromised balances totaled $500,859.22 across 1,685 users.

DefiLlama’s hack database records the loss at $500,859 and classifies the incident as a withdrawal logic flaw in a Rust-based protocol. Early reports had estimated losses between $600,000 and more than $1 million.

The attacker reportedly invoked SubmitSignatures on Avici’s authorization program, then used AddCollateralAdmin on its collateral program before calling WithdrawCollateralAsset to remove funds. The attacking wallet later held about 10,005 SOL, worth roughly $1.07 million at the time, plus around $11,600 in stablecoins.

The AVICI token dropped about 39% in 24 hours to near $0.26 and briefly touched a new all-time low around $0.2189. That decline left the token more than 96% below its November 2025 peak of $7.61.

At the time of writing, AVICI had recovered to about $0.3093 but remained down more than 27.8% over 24 hours, according to CoinMarketCap.

Ajna Reports Losses From Liquidation Accounting Manipulation

On August 29, on-chain monitoring firm Defimon Alerts reported that Ethereum lending protocol Ajna lost about $775,000 through liquidation accounting manipulation. The syrupUSDC pool alone accounted for $173,700 of the reported losses.

Defimon said it detected a prepared attack more than an hour before the first exploit transaction and warned Ajna through Discord, but said the protocol “failed to react.”

Ajna later confirmed it was investigating “unusual movements” and advised users to withdraw funds, repay loans, and stop interacting with the protocol. DefiLlama data showed Ajna’s total value locked at about $246,880, down 71.3% over the previous 30 days.

Audited Crypto Protocols Face Heavy Security Losses

CoinGecko’s report “2026’s State of Crypto Security” documented more than 245 incidents between January 2025 and July 2026, with losses totaling $3.63 billion. Among them, 147 involved audited protocols and represented 88.44% of all stolen capital.

The report found that most attacks targeted infrastructure, third-party services, governance, or human error rather than flaws covered by audits. Active on-chain insurance also fell to 20.2% of the market, declining from $163.2 million to $130.2 million. By August 2026, five of nine on-chain insurance protocols had reportedly become inactive or shifted their business models.

The post Avici Refunds Users After Solana Breach as Ajna Suffers Ethereum Exploit first appeared on Coinfea.