Exchange Ranking
Top Exchanges
24h Volume Ranking
Popularity Ranking
Exchange BTC Balance
Proof of Reserves
Decentralized Exchanges
Funding Rate
Funding Heatmap
Liquidation Data
Max Pain
Long/Short Ratio
Whale L/S Ratio
Binance/Okex/Huobi L/S
Bitfinex Margin L/S
ETF Tracker
Solana ETF
XRP ETF
Hong Kong ETF
Bitcoin Treasuries
Crypto Reversal
Ethereum Reserves
HyperLiquid Wallet Analysis
Hyperliquid Whale Watch
Large Transactions
On-chain Movement
Bitcoin ROI
Stablecoin Market Cap
Options Analysis
News
Articles
Economic Calendar
Features
Wallet
Contract Calculator
Security
Collections
Watchlist
Following
SOL Avici promises full refund
Avici, a Solana-based digital bank, said it will refund all affected card balances in full after a security breach on August 28 that resulted in user funds being withdrawn. A day later, Ajna, the Ethereum lending agreement, suffered a similar attack.
The refund promise was released on August 28, and Avici said its card issuing partner Rain had traced the problem to a defective version of the Solana card contract. "All affected card balances will be refunded in full." Avici wrote that the contract was used by the digital bank "and a few other programs" and was subsequently fully upgraded.
It said that 1685 users affected by the breach (involving a card balance of US$500,859.22) will receive a full refund.
How an attacker cleared the card program
The hacker database related to the Avici incident recorded a loss of US$500,859, which is consistent with the company's update. The database also classifies it as a flaw in withdrawal logic in Rust based agreements. Preliminary reports put the damage at between $600,000 and more than $1 million.
The attacker reportedly called a function called SubmitSignatures on Avici's authorization program, then called AddCollateralAdmin on its mortgage program, and then withdrew funds through Withdraw CollateralAsset. The attacker's wallet ended up holding approximately 10,005 SOLs (valued at approximately $1.07 million at the time) and approximately $11,600 in stablecoins.
After the attack, the AVICI token fell about 39% in 24 hours to nearly $0.26, hitting a record low of about $0.2189. This is more than 96% down from the peak of $7.61 set in November 2025. As of writing, the token has rebounded slightly and is currently trading at approximately $0.3093, but has still fallen more than 27.8% in the past 24 hours.
Ajna becomes the next victim
On August 29, the online surveillance company reported that Ajna lost approximately US$775,000 due to clearing accounting manipulation on Ethereum, and the syrupUSDC pool alone lost US$173,700. The company said it flagged the planned attack more than an hour before the first attack deal occurred and warned the team in its community, but Ajna "failed to respond."
Ajna confirmed that it was investigating "unusual movements" and urged users to withdraw all funds, repay loans and stop interacting with agreements. Data shows that Ajna's total lock-in value is approximately $246,880, a decline of 71.3% in the past 30 days.
A costly year for audit agreements
A report documented more than 245 incidents from January 2025 to July 2026, with a total loss of US$3.63 billion. Of these, 147 targeted audited agreements, accounting for 88.44% of all stolen funds, and most attacks exploited infrastructure, third-party services, governance or human error rather than vulnerabilities within audit scope.
Insurance coverage that absorbs these losses is also declining, with active chain insurance reported to have dropped to 20.2% of the market, from $163.2 million to $130.2 million. In addition, as of August 2026, five of the nine on-chain insurance agreements have ceased operations or been transformed.
