Raydium (RAY)

$RAY continues to hold these levels and is up 2% atm amidst all this fear. It really looks decent which should say something about the $SOL eco I think it's worth paying attention https://t.co/zZKE5CbTSX

Correction, correction, but farmers earn whenever something happens.😉 Additionally, on @Raydium some stonks are subsidized by receiving extra #RAY. Of course, APR is dynamic and changes frequently. DYOR https://t.co/wc8rmsSqoM

DeFi teams obsess over the next smart contract exploit. But what if the bigger threat is code everyone forgot exists? The recent Raydium exploit exposed a growing security blind spot across DeFi: zombie contracts. Hackers drained roughly $1.34M from abandoned V3 AMM liquidity pools that were no longer part of Raydium's active product suite. The pools weren't supported by the UI, weren't integrated into current workflows, and had effectively been forgotten. The problem were still live on-chain. A contract doesn't stop being attackable just because a protocol stops talking about it. According to public security reports, at least 8 confirmed exploits since 2025 have targeted deprecated or abandoned contracts, generating more than $10.8M in losses. When broader legacy infrastructure incidents are included, losses rise to approximately $22.5M. What's interesting is that most of these incidents aren't really being discussed as a separate risk category. They're usually filed under "smart contract vulnerabilities." But the root cause is often different. The issue is flawed contract lifecycle management. Raydium's deprecated V3 architecture lacked validation mechanisms found in newer versions. Attackers exploited those missing safeguards by creating fake liquidity tokens and presenting them as legitimate LP assets, ultimately draining idle funds that had remained trapped inside forgotten pools. The pattern is becoming familiar across DeFi: • Product gets deprecated. • Users migrate elsewhere. • Legacy contracts remain active. • Monitoring decreases. • Attackers discover the opportunity. • Treasury absorbs the damage. Nobody using the current product gets affected. Yet the protocol still pays the bill. This is why "deprecated" should never be treated as a security status but a documentation status. If a contract still holds assets, accepts calls, maintains permissions, or interacts with other systems, it remains part of the protocol's attack surface regardless of whether users can access it through the front end. Every major DeFi protocol now carries years of historical deployments, legacy integrations, retired modules, dormant liquidity pools, and old permission structures. Those forgotten pieces of infrastructure are quietly becoming some of the most attractive targets in crypto. The next wave of DeFi security will not be about finding bugs in new code. It will be about eliminating risk hidden inside old code. Because on-chain, forgotten doesn't mean gone.

🔥 Raydium confirms a vulnerability on its old AMM V3 👀 The program in question had been inactive since 2021. #Raydium #Solana #DeFi https://t.co/Ll0knSadML

🚨 UPDATE: Raydium confirmed an exploit on its discontinued AMM V3 program, inactive since 2021. https://t.co/gerk1gi4N4

⚠️ Raydium suffers an exploit of $1.34 million in a legacy AMM program; the treasury will cover the losses Raydium confirmed an exploit in its old AMM V3 program that resulted in the theft of approximately $1.34 million worth of assets. The attack occurred in inactive liquidity pools and was due to insufficient validation in legacy contracts that allowed the attacker to bypass proportion controls. Incident details The hack affected exclusively withdrawn and inactive liquidity pools, including RAY‑SOL, USDC‑RAY and SRM‑RAY. According to the Raydium team, the vulnerable code belonged to a discontinued version of the protocol that had not been used since 2021 and had already been removed from the official interface. Developers emphasized that active users of the platform were not affected, as the exploit was limited to legacy contracts that are no longer part of Raydium's operating ecosystem. Market reaction and team response Despite the incident, the native RAY token showed resilience and rose more than 2% in the hours following the announcement. The project's treasury confirmed it will assume the full cost of the losses to compensate those affected. As a preventive measure, the Raydium team launched an exhaustive and independent security review of all active smart contracts deployed on the Solana mainnet. The incident again highlights the risks associated with legacy contracts that remain deployed on the blockchain, even when they are no longer in active use. In summary Raydium suffered a $1.34 million exploit in its old AMM V3 program, affecting only inactive liquidity pools belonging to a protocol version discontinued since 2021. Current users were not affected. The project's treasury will cover the losses and the team has initiated a full security review of its active smart contracts. Despite the incident, the RAY token remained stable and advanced more than 2% after the announcement. Important notice This information is based on Raydium's official statement and on-chain reports published on June 11, 2026. It does not constitute investment advice. Always perform your own analysis before making any financial decision.