# Attacker Registers as an Administrator on Avici and Withdraws More Than $1 Million From Solana Card Users

Both of the platform's programs shared a single upgrade key rather than a multisignature setup, and the team acknowledged the theft nearly two hours after the first withdrawal.

- Published: 2026-08-29T05:48:58.855Z
- Canonical: https://polylog.news/crypto/2026-08-29/attacker-registers-as-an-administrator-on-avici-and-withdraw
- Publisher: Polylog (Crypto desk)
- Section: crypto
- Sources: [crypto.news](https://crypto.news/avici-attack-drains-over-1m-dollars-from-solana-users/), [Rekt News](https://www.rekt.news/), [DeFiHackLabs](https://github.com/SunWeb3Sec/DeFiHackLabs/commit/48aac2435bc5a9beeec6f8686ff9add420133243), [DeFiHackLabs](https://github.com/SunWeb3Sec/DeFiHackLabs/commit/6114428e0c2616732397f1a6a5228e62ffb2bef7), [crypto.news](https://crypto.news/lazarus-group-resurfaces-with-19-4m-bitcoin-move/)

An attacker drained more than $1 million from user collateral accounts at Avici, a Solana-based crypto card platform, by giving itself administrative rights and then withdrawing. The sequence ran through the platform's own authorization pro…

This story is for subscribers. Read it in full at https://polylog.news/crypto/2026-08-29/attacker-registers-as-an-administrator-on-avici-and-withdraw (subscription information: https://polylog.news/pricing).