Exploit drains $1.34 million from Raydium’s dormant pools
A security exploit has drained about $1.34 million from five inactive liquidity pools on the Solana-based decentralized exchange Raydium, with the platform confirming that all losses will be covered by its treasury.
The breach targeted legacy pools tied to trading pairs such as RAY-SOL, USDC-RAY, and SRM-RAY. Early estimates show the attacker withdrew roughly 150,000 RAY tokens, 5,600 SOL, and about 900,000 USDC.
Attack focused on inactive system
Raydium said the exploit affected an automated market maker program that had been decommissioned in 2021 and was no longer accessible through its main interface. The platform added that no active users were impacted, as its software development kit and decentralized application had already stopped interacting with these older AMM V3 pools.
The vulnerability was traced to insufficient verification of liquidity provider mints, allowing the attacker to bypass internal checks governing pool balances. Raydium stated that all active mainnet programs remain unaffected and are now undergoing a separate audit process.
Treasury coverage limits fallout
The exchange’s decision to fully reimburse losses signals that the financial impact is contained and manageable. The incident stands apart from more serious breaches that affect live infrastructure, as it originated from outdated code no longer in active use.
Market reaction remains steady
Traders showed little concern following the disclosure, with Raydium’s native RAY token rising more than 2% on the day. The muted response contrasts with a December 2022 incident, when a private key compromise led to a $5.5 million loss and an immediate drop of over 8% in the token’s price.
Broader market pressures dominate
The exploit comes during a wider downturn in the digital asset market, where macro forces continue to outweigh isolated platform incidents. Bitcoin recently fell below $60,000 for the first time since late 2024, pressured by heavy outflows from U.S. spot ETFs estimated between $2.8 billion and $3.5 billion.
Industry losses trend lower
While security breaches remain a recurring risk, their financial impact has declined in recent years. Industry-wide losses from decentralized finance exploits dropped from $2.62 billion in 2022 to $534 million in 2024. The median loss per incident has also fallen sharply, from $6 million in 2022 to about $1.5 million in 2025.
The Raydium incident is likely to be viewed as contained, with attention in the near term expected to remain on broader market conditions and capital flows rather than isolated technical setbacks.
Concerned about DeFi exploits? Learn how crypto safety standards can protect your funds on centralized and decentralized platforms.
Disclaimer: The content on this page is provided for general informational purposes only and does not represent the views or financial advice of Toobit. We make no guarantees regarding the accuracy or completeness of this information and shall not be held liable for any errors, omissions, or outcomes resulting from its use. Investing in digital assets involves risk; users should independently evaluate their financial situation and the risks involved. For further details, please consult our Terms of Service and Risk Disclosure.
