Whale Alert Whale Alert Whale Alert

Outdated Rain Solana card contract exploit drains $1.1M in USDC and USDT from user collateral accounts

first published 2026-09-03T04:22:48Z
Exploit Security Solana Stablecoin Crime Defi
An attacker exploited an outdated Rain Solana card contract to drain about $1.1 million from stablecoin-backed card collateral accounts across multiple programs, including Avici and Tria. The attacker bypassed signature checks, gained admin access, withdrew USDC and USDT, and laundered the funds through deBridge into Tornado Cash. Rain said affected deployments were upgraded and users would be made whole, and that self-custodial wallets were not impacted.
AI Analysis
The summary describes a confirmed exploit, loss of $1.1 million, and theft of USDC and USDT from card collateral accounts. It also notes laundering through deBridge and Tornado Cash, which makes this a clear negative security event with near-term market relevance.
Expected Investor Sentiment: Very Bearish
Potential Market Impact: Significant
Source Articles