According to CoinMeta, Avici has confirmed that it will refund in full each user affected by the card leakage incident. This incident resulted in a loss of approximately $500,859 for 1,685 users, which is lower than the initial online estimate of $1 million. The vulnerability stemmed from the Solana card contract used by Rain, a card issuance partner of Avici, and has now been fixed in all programs. Avici's self-hosted wallets were not affected, and the company has submitted a report to FBI.