Odaily reported that Raydium core contributor InfraRAY posted on X that the team has confirmed an attack against an old AMM V3 program that had been discontinued in 2021. According to the statement, the attacker removed part of the liquidity without authorization. InfraRAY emphasized that the incident does not affect current Raydium users and that all active Raydium mainnet programs remain unaffected.
Legacy pools were no longer available through official interfaces
InfraRAY said the affected pools had not been accessible through the official Raydium UI since they were discontinued. Raydium SDK and DApp support also did not include operations for legacy AMM V3 pools on mainnet. The five affected pools were Sollet USDT-RAY, Sollet ETH-RAY, SRM-RAY, USDC-RAY and RAY-SOL. The team described the incident as an isolated issue involving the old program, rather than an event impacting Raydium’s current mainnet products.
Stolen assets total about $1.34 million
Preliminary figures show that the stolen assets included about 150,177 RAY, 5,603 SOL and 893,700 USDC, with a total value of approximately $1.34 million. InfraRAY said the related losses will be fully reimbursed by the treasury, covering the confirmed losses from the affected liquidity pools.
The investigation found that the vulnerability came from insufficient validation of the LP token mint address. The attacker created new LP tokens and impersonated legitimate LP tokens, bypassing the protocol’s ratio-checking mechanism and withdrawing funds. InfraRAY also stated that the incident was not caused by private key leakage or compromised permissions, and that there is no spread risk.