Outdated Rain card contract exploit drains $1.1M and knocks AVICI down 49%
Avici says $500,800 was taken from 1,685 users’ card-funding balances, with refunds promised but no timeline given.
Start hereCrypto wallet security is mostly seed-phrase security, and the right backup design prevents both theft and lockouts.

Most losses come from seed phrase exposure or backup failure, so the best setup is the one you can recover under stress.

A solid seed phrase backup stays offline, survives fire and water, and is stored to resist quick copying by anyone who gets a glance.

A safe cold storage setup keeps private keys offline, verifies every send on-device, and proves recovery works before moving meaningful size.
Avici says $500,800 was taken from 1,685 users’ card-funding balances, with refunds promised but no timeline given.
The alert describes an ongoing threat but provides no named researchers, scope, or confirmed losses.
The reported third-wave losses span 4,585 addresses, while Senate odds for a Clarity Act vote fade with five days left.
@Injectivelabs/sdk-ts v1.20.21 was downloaded 310 times before removal, and researchers urged key rotation for any exposed wallets.