AVICI NEOBANK HACKED, OVER $600K DRAINED FROM USER ACCOUNTS

**Hacker Pranks**

**Avici Neobank Hacked: $600K Drained from User Accounts via Phishing Attacks**

A shocking security incident has rocked the world of cryptocurrency, as the Solana-based neobank Avici has revealed that over $600,000 has been drained from user accounts. But here's the twist: the losses weren't due to a breach of the platform itself, but rather a coordinated wave of phishing attacks that targeted users and tricked them into connecting their wallets, exposing them to drainer malware.

**Phishing Sites Impersonating Avici Trick Users into Connecting Wallets**

The phishing sites, which included domains like getavici.today and lured users into connecting their crypto wallets under the pretense of claiming airdrops or accessing platform features. Once connected, drainer malware quietly swept funds from those wallets. The official channels of Avici, including its website at avici.money and social media presence, have not disclosed any internal breach, and the platform has continued to post routine product updates and growth metrics without acknowledging a systemic security failure.

**Avici's Model and the Risk of Phishing Attacks**

Avici's model, which positions itself as a neobank that doesn't actually hold user money, creates a specific risk profile. The platform offers Visa spend cards and virtual USD and EUR bank accounts, all while leaving custody of funds with the user rather than the platform. This means that if a user gets phished and signs a malicious transaction, no fraud department at Avici can reverse it. The blockchain doesn't do chargebacks, leaving users vulnerable to phishing attacks.

**The Scale of the Attack and the Response of Avici**

The cumulative $600,000 figure suggests either the scale of targeting intensified significantly or multiple attack campaigns have been rolled into a single reported total. While Avici's official channels have remained silent on the issue, the platform's metrics, including total spend volume running into the tens of millions and user retention rates ranging between 37% and 71%, indicate a thriving business.

**The Social Engineering Problem Isn't Going Away**

The risk is compounded by the fact that Avici's users are already comfortable connecting wallets to web interfaces. Scammers are effectively weaponizing the same muscle memory that makes the product usable in the first place. For anyone already using or considering Avici, the immediate practical question is simple: treat any website, link, or social media post asking you to connect your wallet with aggressive suspicion unless you navigated there yourself through a bookmarked URL. Airdrop announcements distributed through unofficial channels should be assumed fraudulent until proven otherwise through Avici's verified official accounts.

**Conclusion**

The Avici neobank hacking incident serves as a stark reminder of the ongoing threat of phishing attacks in the world of cryptocurrency. The fact that the losses weren't due to a breach of the platform itself, but rather a coordinated wave of phishing attacks, highlights the importance of user education and awareness in preventing such incidents. As the cryptocurrency space continues to grow, it's essential that users remain vigilant and take proactive steps to protect themselves from phishing attacks.

**Recommended Reading**

* "Phishing Attacks on the Rise: How to Protect Yourself" * "The Risks of Phishing Attacks on Cryptocurrency Exchanges" * "How to Stay Safe on the Blockchain: Tips and Best Practices"