Avici has resolved a security incident involving Solana card-balance contracts, refunding every affected user in full and adding 10% cashback on the amounts withdrawn. The company announced the completion on August 29, 2026, after previously saying reimbursements were underway. The exploit affected funds users had moved into Solana card balances through Avici's Top Up flow, but did not reach regular self-custodial wallets, EVM card balances, onramps, offramps, or swaps. Rain, Avici's card-issuing partner, funded the reimbursements and patched the shared Solana contract used across its card programs, including those serving Tria and Jupiter. A full postmortem remains pending, although Rain has said the vulnerability was fixed and no further unauthorized activity has been observed.