A reused-signature flaw in an outdated Rain Solana contract drained about $1.1 million from stablecoin card programs, Blockaid said.
Avici said a vulnerable Solana card contract affected 1,685 customers and $500,859.22 in balances, while the crypto-card platform and partner Rain pledged full refunds.