Avici neobank hacked, over $600K drained from user accounts

Avici, a self-custodial neobank built on the Solana blockchain, is at the center of a security incident that has drained more than $600,000 from user accounts. The losses, however, appear to stem not from a compromise of the platform itself but from a coordinated wave of phishing attacks targeting its users.

Fraudulent websites impersonating Avici, including domains like getavici.today, lured users into connecting their crypto wallets under the pretense of claiming airdrops or accessing platform features. Once connected, drainer malware quietly swept funds from those wallets.

Avici’s official channels, including its website at avici.money and its social media presence, have not disclosed any internal breach. The platform has continued posting routine product updates and growth metrics without acknowledging a systemic security failure on its end.

Earlier phishing activity targeting Avici users reportedly drained smaller amounts, roughly 0.2 SOL per incident, in the late stages of 2025. The cumulative $600,000 figure suggests either the scale of targeting intensified significantly or multiple attack campaigns have been rolled into a single reported total.

Avici’s model and why it creates a specific risk profile

Avici positions itself as a neobank that doesn’t actually hold user money. It offers Visa spend cards and virtual USD and EUR bank accounts, all while leaving custody of funds with the user rather than the platform. If a user gets phished and signs a malicious transaction, no fraud department at Avici can reverse it. The blockchain doesn’t do chargebacks.

The $AVICI governance token launched in October 2025 through MetaDAO, and its price has responded to product announcements in both directions since. Monthly platform metrics tracked by Avici include total spend volume running into the tens of millions, with user retention rates ranging between 37% and 71%, and active transaction counts that the team monitors as a core health indicator.

The social engineering problem isn’t going away

For Avici specifically, the risk is compounded by the fact that its users are already comfortable connecting wallets to web interfaces. That’s the core user behavior the platform is built around. Scammers are effectively weaponizing the same muscle memory that makes the product usable in the first place.

For anyone already using or considering Avici, the immediate practical question is simple: treat any website, link, or social media post asking you to connect your wallet with aggressive suspicion unless you navigated there yourself through a bookmarked URL. Airdrop announcements distributed through unofficial channels should be assumed fraudulent until proven otherwise through Avici’s verified official accounts.

Disclosure: This article was edited by Editorial Team. For more information on how we create and review content, see our Editorial Policy.