Raydium Legacy AMM Exploit Causes $1.34 Million Loss; Treasury to Reimburse Victims

Raydium is a major decentralized exchange in the Solana ecosystem that uses automated market maker liquidity pools to facilitate trades. The affected AMM V3 was retired in 2021 and had long been unsupported by Raydium's official interface and SDK, but assets remained in legacy pools. The incident highlights how retired smart contracts can remain a security risk if they are not fully shut down.

On June 10, 2026, Raydium confirmed that an attacker exploited inadequate LP mint validation to remove about $1.34 million from five retired pools. The assets included approximately 150,177 RAY, 5,603 SOL and 893,700 USDC. Raydium said its current mainnet programs and funds belonging to front-end users were unaffected, and pledged to reimburse affected users in full from its treasury.