Hacker Drained $1.34M From Raydium by Faking Ownership of Abandoned Pools

Jun 11, 2026

< 1 min read

by Coin Edition

for CoinEdition

Hacker Drained $1.34M From Raydium by Faking Ownership of Abandoned Pools

AI Overview

An attacker exploited an LP mint validation flaw in Raydium's deprecated Legacy AMM V3 pools (dormant since 2021), draining 150,000 RAY, 5,603 SOL and 893,000 USDC — about $1.34M — from five abandoned pools. Raydium says its treasury will fully reimburse affected users and that current mainnet programs, SDK and DApp are unaffected, but the exploit underscores DeFi/DEX security risks and the need to audit or disable legacy contracts.

Bearish

Predictions Markets

See what traders are focused on

View analytics →

The attacker drained 150K RAY, 5603 SOL, and 893K USDC from five pools dormant since 2021.
LP mint validation flaw lets attackers create fake mint and bypass proportion checks entirely.
Raydium treasury will fully compensate affected users with no impact on current mainnet programs.

A hacker drained approximately $1.34 million from Raydium’s Legacy AMM V3 program, targeting five liquidity pools that were deprecated years ago but never fully disabled on-chain. The exploit was discovered and disclosed by Raydium’s core team, who confirmed that the stolen assets will be fully reimbursed from the protocol’s treasury.

No current Raydium users were affected. The exploited pools have been inaccessible through the Raydium UI since their deprecation, and the current mainnet programs, SDK, and DApp remain entirely unaffected.