Tria said a vulnerability in a Solana card contract operated by issuing partner Rain affected 636 users and $431,945 in card balances. The company said all affected users are being refunded in full, while Rain has upgraded and fixed the contract across its programs. Tria said wallet funds, including holdings on Solana, EVM networks and Aptos, were never exposed because card balances are held separately from self-custodial wallets. Payments continued working, although withdrawals and card-balance integrity were affected. The incident also briefly affected or prompted responses from other programs using Rain, including Avici and Jupiter, while KAST and Ether Fi said they were unaffected. Tria said remediation with Rain and security partners is continuing and that it will confirm when all refunds have landed.