Solana-based neobank Avici lost $650,000 in a security breach, according to a Yahoo Finance report, and its native token dropped roughly 40% in the aftermath of the incident.

The exploit targeted the protocol's operations on the Solana blockchain, the report said. The attackers made off with the six-figure sum, and markets reacted swiftly: the project's token shed about 40% of its value following disclosure of the hack.

The incident places Avici among a growing set of Solana ecosystem projects that have suffered direct losses to attackers. For a neobank positioning itself as a consumer-facing financial service on-chain, a breach of this size carries operational consequences beyond the immediate dollar loss.

What does the hack mean for Avici's users?

A $650,000 drain on a banking application raises immediate questions about custody arrangements, wallet security and the segregation of customer funds. Users of neobanking products typically expect deposit-style protections. An exploit of this scale suggests that at least part of the platform's treasury or operational funds was accessible to the attacker.

The 40% token collapse compounds the damage. A sell-off of that magnitude signals a sharp loss of confidence among holders and reduces the capital base the project can draw on for remediation, reimbursements or continued development.

Why do neobanks face elevated exploit risk?

Protocols that combine banking functions — deposits, transfers, yield — with token-based economics concentrate risk in their smart contracts and key management. Solana's high-throughput architecture supports the user experience these apps advertise, but the attack surface spans program code, private key handling and integration points with external protocols.

An attacker who finds a single weakness in that stack can extract funds in one transaction, which is consistent with the swift six-figure loss reported here.

What happens next?

Following exploits of this type, affected projects typically face a sequence of decisions: whether to freeze remaining funds, whether to pursue on-chain tracing of the stolen assets, whether to negotiate with the attacker, and how to compensate users. Each path carries costs. The token's 40% decline already reflects the market's provisional verdict on the project's ability to absorb the loss.

For the wider Solana ecosystem, the Avici breach is another data point in the debate over security standards for consumer finance applications on public chains. Institutional partners and regulators scrutinize exactly this category of incident when assessing whether on-chain banking services are ready for mainstream adoption.

No details on the exact exploit vector, the identity of the attackers, or a user-reimbursement plan were included in the initial report. Watch for a post-mortem from the Avici team and any on-chain movement of the stolen funds in the coming days.