The Avici attacker turned $190 into $670000 🔥 Wallet created yesterday at 13:40 UTC. Funded with $190 USDC bridged from Ethereum - just enough for gas. Drain started at 16:49. 8,857 transactions and counting. Same pattern on every account: 1. submit a signature bundle 2. call AddCollateralAdmin and make yourself admin 3. withdraw The second signature check pointed back at instruction 0. Solana verified the attacker’s own signature a second time. The program credited an admin key it should never have accepted. That put the attacker as admin on 1,100+ collateral accounts. Median take: $24. Largest in sample: $5,268. First batch of ~$576K left the wallet between 18:19 and 18:34 UTC. The wallet kept filling after that. This was not a treasury drain and not a stolen upgrade key. Every dollar came out of individual user accounts, one at a time.(Officer's Notes)