Avici, a self-custodial neobank built on the Solana blockchain, has been targeted by coordinated phishing attacks that drained over $600,000 from user accounts. The platform itself has not reported an internal breach, with losses attributed instead to social engineering campaigns.
Fraudulent websites impersonating Avici, including domains such as getavici.today, deceived users into connecting their cryptocurrency wallets by offering false airdrop claims or access to platform features. Drainer malware then extracted funds from those wallets. Avici's official channels at avici.money and its social media accounts have not disclosed a systemic security failure.
Earlier phishing attempts targeting Avici users in late 2025 reportedly drained approximately 0.2 SOL per incident. The cumulative $600,000 figure suggests either the scale of attacks intensified significantly or multiple campaigns have been consolidated into a single total.
Self-Custody Model Limits Recourse
Avici operates as a neobank that does not hold user funds directly. The platform offers Visa spend cards and virtual USD and EUR bank accounts while maintaining user custody of assets. This structure means that if a user is phished and signs a malicious transaction, Avici's fraud department cannot reverse it, and the blockchain provides no chargeback mechanism.
The $AVICI governance token launched in October 2025 through MetaDAO. Monthly platform metrics show total spend volume in the tens of millions, with user retention rates ranging between 37% and 71%.
Wallet Connection as Attack Vector
The phishing risk is compounded by Avici's core functionality, which requires users to connect wallets to web interfaces regularly. Scammers are leveraging the same user behavior that makes the platform usable as an attack surface.
Users are advised to treat any website, link, or social media post requesting wallet connections with suspicion unless they navigated to the site directly through a bookmarked URL. Airdrop announcements distributed through unofficial channels should be assumed fraudulent until verified through Avici's official accounts.
