Cryptobriefing Phishing Attack Drains Over $600K from Solana Neobank Avici Users
Article Content
- •Over $600,000 stolen from Avici users via a phishing site.
- •The AVICI token dropped by approximately 38.54% following the attack.
- •Users are urged to revoke permissions and verify website authenticity.
A phishing site impersonating the Solana neobank Avici has drained over $600,000 from users by tricking them into connecting their wallets. The fraudulent site mimicked the legitimate Avici platform, prompting users to connect their wallets under false pretenses. This incident highlights the ongoing threat of phishing attacks in the decentralized finance (DeFi) sector, which has seen over $1 billion in losses in 2025 alone. Following the breach, the AVICI token experienced a significant drop, falling by approximately 38.54% to $0.2728. Users are advised to revoke permissions granted to suspicious sites and monitor their wallets closely. The attack is part of a broader trend of phishing scams targeting DeFi users, emphasizing the need for vigilance and verification of website authenticity. Avici has not confirmed any internal breach, indicating that the attack was solely through phishing methods rather than a compromise of their systems.
Ask AI about this cluster
Answers cite the sources they use
Timeline
More articles in this cluster (11)
Following this threat?
Track Avici in your own feed — you're alerted when they show up in new reporting, leak sites or exploitation.
Free account · no card needed
Continue Reading
CISA Mandates Urgent Patching of Five Critical Flaws Exploited by Flax Typhoon The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has ordered federal agencies to patch five critical vulnerabilities by October 11, 2026, following exploitation by the China-linked hacking group Flax Typhoon. The vulnerabilities, added to CISA's Known Exploited Vulnerabilities (KEV) catalog, include…
Critical Zero-Day Exploit Found in BeyondTrust Remote Support BeyondTrust disclosed a critical vulnerability, CVE-2026-102764, in its Remote Support product, exploited by the suspected China-linked group ARMORY CASTLE since August 2026. This flaw, with a CVSS score of 9.3, allows attackers to perform arbitrary file uploads and gain host-level control without requiring…