🔥 ALERT : Avici Security Breach: Attacker Steals $670K from 1,100+ User Accounts Using Just $190 $DEXE
· The Attack: Avici, a Solana-based banking platform, suffered a security breach where an attacker stole ~$670,000 from individual user accounts, not a central treasury.
· Low-Cost Entry: The attacker funded the wallet with only $190 in USDC (bridged from Ethereum) to cover transaction fees.
· Exploit: A smart contract authorization flaw allowed the attacker to gain admin privileges over 1,100+ collateral accounts by manipulating signature verification (second signature routed to first instruction).
· Scale: Over 8,857 transactions were executed; median loss per account was ~$24, with the largest single loss at $5,268.
· No Upgrade Key Compromise: The program code and upgrade key remained untouched since March 2025—the flaw was in the contract logic itself.
· Aftermath: AVICI token price plunged over 45% following the incident.
· The Attack: Avici, a Solana-based banking platform, suffered a security breach where an attacker stole ~$670,000 from individual user accounts, not a central treasury.
· Low-Cost Entry: The attacker funded the wallet with only $190 in USDC (bridged from Ethereum) to cover transaction fees.
· Exploit: A smart contract authorization flaw allowed the attacker to gain admin privileges over 1,100+ collateral accounts by manipulating signature verification (second signature routed to first instruction).
· Scale: Over 8,857 transactions were executed; median loss per account was ~$24, with the largest single loss at $5,268.
· No Upgrade Key Compromise: The program code and upgrade key remained untouched since March 2025—the flaw was in the contract logic itself.
· Aftermath: AVICI token price plunged over 45% following the incident.
