Altcoins News

Story: Raydium Loses $1.34 Million as Attacker Drains Three Token Pools on Solana

By Sakamoto Nashi

1 / 15

How the Attacker Moved the Money. PeckShield tracked what happened to the stolen funds after the drain. The attacker didn't sit still.

2 / 15

Raydium's Active Programs and Ongoing Reviews. Raydium was quick to say its active programs weren't touched.

3 / 15

Raydium got hit. The Solana-based decentralized exchange lost $1.34 million after an attacker exploited a flaw buried inside a program the platform had already retired years ago.

4 / 15

The breach pulled 150,000 RAY tokens, roughly 5,600 SOL, and close to 900,000 USDC out of three liquidity pools — RAY-SOL, USDC-RAY, and SRM-RAY.

5 / 15

Not accessible. Not maintained. But still dangerous, apparently.

6 / 15

No public recovery plan from Raydium so far. Unclear if one is coming.

7 / 15

The broader pattern here isn't new. DeFi exploits that target legacy or retired code have shown up before across multiple chains.

8 / 15

Read also: Ethereum Stuck Below $1.9K as Fibonacci Cluster Blocks Any Real Recovery

9 / 15

Raydium was quick to say its active programs weren't touched. The exchange told users that current mainnet systems are secure and that core contributors are running security…

10 / 15

And the LP mint validation issue is worth paying attention to. If the attacker could create a fake mint that passed as a legitimate LP token in the old V3 program, the question…

11 / 15

RAY token holders are probably watching closely. Losing 150,000 RAY from pools isn't a trivial amount, and even if the active systems are fine, the optics of a $1.

12 / 15

Raydium moved fast on communication, at least. The exchange identified the breach, named the source, and made clear that the flaw was in retired infrastructure rather than…

13 / 15

Related: Humanity Protocols $36M Hack Drains 341 Million H Tokens Across Two Chains

14 / 15

What it didn't do — at least not publicly — is say anything about recovering the stolen funds.

15 / 15

The attacker bridged assets across two chains, ran them through a mixer, and split the trail. Raydium's security reviews of mainnet programs are still ongoing.

The Currency Analytics

Want the full story?