TheBlock
Raydium, one of Solana's largest decentralized exchanges, confirmed a $1.34 million exploit targeting a retired automated market maker program. The protocol announced that its treasury will cover the losses in full, shielding affected liquidity providers from the impact.
Why it matters
The attack is notable because it struck a deprecated AMM program — infrastructure that was no longer actively maintained or promoted, yet apparently still held user funds or retained exploitable permissions. This raises a broader question for the DeFi sector: retiring a program on-chain is not the same as neutralizing it. Residual contracts with live balances remain attack surface until explicitly closed or drained by the protocol team.
For Solana's DeFi ecosystem, Raydium is a cornerstone liquidity venue. Any security incident — even one the treasury absorbs — carries reputational weight and may prompt liquidity providers to reassess exposure across the chain's AMM landscape.
Market impact
At $1.34 million, the exploit is contained relative to the largest DeFi hacks on record, and the treasury backstop limits direct user losses. However, the incident is likely to keep near-term pressure on RAY sentiment and may accelerate calls for formal deprecation procedures across Solana-based protocols — including mandatory fund migration windows before a program is retired.
Frequently asked questions
-
Will Raydium users who lost funds in the exploit be reimbursed?
Yes. Raydium has stated that its treasury will cover the $1.34 million in losses in full, meaning affected liquidity providers are expected to be made whole.
-
Why was a retired AMM program still vulnerable to an exploit?
Retiring or deprecating a program on-chain does not automatically close it or drain its balances. Residual contracts that still hold funds or retain active permissions remain exploitable until formally closed by the protocol team.
-
What does this incident mean for other Solana DeFi protocols?
The exploit is likely to accelerate calls for formal deprecation procedures across Solana-based protocols, including mandatory fund migration windows before a program is officially retired, to eliminate residual attack surface.
WuBlockchain
CryptoSlate
CoinDesk
Lookonchain
CoinTelegraph