Tria
Auto-generated score, not yet verified against the scoring model. Under review — treat as indicative, not a verdict.
anchored·4V3mVb…mCpRSummary
Tria is a self-custodial Solana-based neobank founded in 2022 by Vijit Katta and Parth Bhalla that raised $12 million in pre-seed and strategic funding in October 2025. On August 28, 2026, an attacker exploited an authorization-bypass vulnerability in an outdated Rain Solana card contract shared across multiple neobank products, draining $431,945 from 636 Tria card users. Tria pledged full refunds plus a 10% bonus to affected users; its native token fell more than 10% following public disclosure. The incident did not affect user self-custodial wallets — only card-collateral balances staged for spending were compromised.
Connected Entities
2 entities- FVNFzqAny8spWdPmYw6RQ9TkYa29ueFFiqCFD1gQnCEj→mentioned with→Tria(50%)
Timeline(8 events)
1 January 2022
Tria co-founded by Vijit Katta (CEO) and Parth Bhalla (CTO) as a self-custodial neobank.
Bitget Academy — What Is Tria14 October 2025
Tria announces $12 million in pre-seed and strategic funding from P2 Ventures, Aptos, and executives from Polygon, Ethereum Foundation, Wintermute, and EigenLayer.
CryptoSlate press release28 August 2026
Attacker's Solana wallet (FVNFzqAny8spWdPmYw6RQ9TkYa29ueFFiqCFD1gQnCEj) begins exploiting an authorization-bypass flaw in an outdated Rain Solana card contract at approximately 16:49 UTC.
GizmoTimes — Avici Rain Card Exploit Explained28 August 2026
Exploit runs for approximately 2 hours and 29 minutes; Blockaid records 8,233 transactions including 2,945 admin additions and 5,288 withdrawal calls. Tria loses $431,945 across 636 users. Avici loses $500,859 across 1,685 users. Total losses estimated at $1.1 million.
crypto.news — Rain contract exploit drains $1.1M from card users28 August 2026
Approximately 455.9 ETH enters Tornado Cash mixers between 19:20 and 19:49 UTC after stolen stablecoins are swapped to SOL and bridged to Ethereum via deBridge.
Blockonomi — Rain Card Exploit Drains $1.1 Million From Solana Users29 August 2026
CoinDesk reports on the exploit; Tria's native token falls more than 10% and Avici's token falls approximately 49% following public disclosure. Tria pledges full refunds plus a 10% bonus to all 636 affected users.
CoinDesk — A Solana-based $1.1 million crypto card hack crashed a neobank's token 49%29 August 2026
Rain states that every program running the outdated contract version has been upgraded and that no further unauthorized activity occurred after the patch.
Blockonomi — Rain Card Exploit Drains $1.1 Million From Solana Users2 September 2026
SpendNode publishes updated details of Tria's disclosure: 636 users affected, $431,945 total loss, full refund commitment pending confirmation of completed remediation with Rain and security partners.
SpendNode — Tria Details Rain Card Vulnerability: 636 Users, $431,945 RefundedDecision Log
- hash: F2j9cMX8mnNG6vRYJxXBJ6J253yLyzXCub52fQW47e64
This investigation is cryptographically anchored to the Solana blockchain (1 event). 8 of 10 cited source URLs have an Internet Archive snapshot.
model: claude-sonnet-4-6
generated: 9/12/2026, 5:12:50 PM
last updated: 9/13/2026, 1:11:40 AM
avoid.net — verified advice for a post-truth world