According to CoinMeta, the Avici attacker successfully withdrew $670,000 from user card balances using only $190 in funds. This security vulnerability allowed the attacker to gain administrative access to over 1,100 user accounts. The Avici team has confirmed that the balances of affected users have been restored, and an additional 10% has been refunded. The Solana contract involved in this incident has been updated, and Avici indicates that no further related activities have been detected.