A vulnerability in an outdated Solana smart contract maintained by card issuer Rain led to a $500,859 exploit affecting 1,685 Avici neobank users. Both companies have pledged full user refunds.