Raydium: Its AMM program, which had been deactivated, was attacked; the entire loss of $1.34 million will be covered by the Treasury.

CoinFeed reported on June 11th that Raydium, a decentralized exchange within the Solana ecosystem, announced that a vulnerability in its deprecated AMM V3 program resulted in the theft of approximately $1.34 million in assets from five inactive liquidity pools. Affected pools included trading pairs such as RAY-SOL, USDC-RAY, and SRM-SOL. Attackers stole approximately 150,000 RAY, 5,600 SOL, and nearly 900,000 USDC. Raydium stated that all losses will be covered by its treasury, and current users are unaffected. The AMM program was deprecated in 2021, and the vulnerability stemmed from insufficient validation of LP mint, allowing attackers to bypass expected ratio checks. Raydium's current mainnet program is unaffected and is undergoing a separate security review.