Avici Neobank Suffers $600K Loss Due to Phishing Attacks on Users

Avici, a self-custodial neobank operating on the Solana blockchain, is facing a significant security incident after more than $600,000 was drained from user accounts. This loss is attributed to a coordinated series of phishing attacks rather than a breach of the platform itself.

Fraudulent websites impersonating Avici, such as getavici.today, deceived users into connecting their crypto wallets under false pretenses, including claims of airdrops or enhanced platform features. Once users connected their wallets, malicious software was able to siphon funds without their knowledge.

Avici's official channels, including its website and social media, have not reported any internal security failures, continuing to share routine updates about product developments and user growth metrics. Previous phishing attempts had resulted in smaller losses, but the cumulative figure of $600,000 indicates a significant escalation in the targeting of Avici users.

The neobank's model presents unique risks, as it does not hold user funds. Instead, it offers Visa spend cards and virtual bank accounts while leaving custody of assets with the users. This means that if a user is phished and authorizes a malicious transaction, there is no recourse for recovery, as blockchain transactions are irreversible.

As phishing attacks become increasingly sophisticated, users of Avici are advised to exercise extreme caution when connecting their wallets to any website or social media link. It is recommended to only navigate to official channels through bookmarked URLs and to treat any unsolicited airdrop announcements with skepticism.