Raydium $1.34M Exploit: Impact on Solana DeFi

Incident Overview

On June 10, 2026, Raydium experienced a security breach resulting in approximately $1.34 million in losses from deprecated liquidity pools. The incident is being received as a manageable, contained event rather than a systemic crisis, with minimal impact on Solana DeFi confidence.

Assets Stolen:

• 150,177 RAY tokens
• 5,603 SOL tokens
• 893,700 USDC

Affected Pools (all deprecated since 2021):

1. Sollet USDT-RAY
2. Sollet ETH-RAY
3. SRM-RAY
4. USDC-RAY
5. RAY-SOL

---

Key Finding: No Current User Impact

The exploit exclusively targeted legacy infrastructure that had been inaccessible via Raydium's active UI and SDK since 2021. Current programs—including CLMM, V4, and V5 implementations—remain unaffected. This isolation significantly limits confidence damage.

---

Market Reaction: Muted

The market response has been notably calm compared to previous exploits. RAY and SOL both posted positive daily changes following the announcement, indicating investor confidence remains intact.

---

Solana DEX Volume Context

Despite the exploit, Solana DEX volumes remain strong:

Solana maintains 3 protocols in the top 6 DEXs by volume, demonstrating continued ecosystem strength.

---

Confidence Impact Assessment

Factors Supporting Resilience:

Concerns & Risk Factors:

---

Community Sentiment

The incident generated significant engagement across crypto social platforms:

Bullish Solana voices maintained confidence:

• Raydium: "I am still bullish on Solana" (66,722 interactions)
• SolanaHub_: "Believe in @solana..." (39,772 interactions)
• 0xINFRA: "This is just the beginning..." (4,864 interactions)

Key narrative themes emerging:

1. "Deprecated doesn't mean dead" — old code still on-chain poses ongoing risk
2. Treasury compensation — full losses covered, no user funds lost
3. "Forgotten infrastructure" — hackers target overlooked code, not just active systems

---

Technical Remediation

Root Cause: Insufficient LP mint validation in the legacy AMM V3 program, allowing the attacker to create a fraudulent LP mint that bypassed proportion checks.

Raydium's Response:

1. Confirmed scope and published technical details within hours
2. Committed to full treasury-funded compensation
3. Announced comprehensive security review of all mainnet programs
4. Confirmed current mainnet, SDK, and dApp were not compromised

Security Improvement: Current Raydium programs use virtual supply mechanisms with proper LP mint verification—addressing the specific vulnerability exploited.

---

Comparative Context: Drift Protocol ($285M Hack)

The simultaneous attention on Solana DeFi security is dominated by the $285 million Drift Protocol exploit (April 1, 2026)—the largest DeFi hack of 2026. The Raydium exploit, by contrast, is a relatively contained incident targeting deprecated infrastructure.

The Raydium exploit has received significantly less market attention than Drift, with sentiment remaining largely neutral-to-bullish.

---

Conclusion

Impact on Solana DeFi Confidence: MODERATE & CONTAINED

The Raydium $1.34M exploit is being absorbed by the market as a manageable incident rather than a systemic crisis. The key differentiators limiting confidence damage:

1. No retail users harmed — treasury compensating all losses
2. Deprecated infrastructure — pools inaccessible since 2021
3. Rapid, transparent response — detailed technical disclosure within hours
4. Minimal TVL impact — only 0.17% of total liquidity
5. Isolated vulnerability — no propagation risk to active protocols

Broader implications: The incident highlights the "forgotten code" attack vector—legacy smart contracts that remain on-chain despite being deprecated from active UI. This is a systemic risk across DeFi, not unique to Raydium or Solana.

---

Unresolved Gaps

---

Evidence Summary

---

Suggested Next Steps

1. Monitor legacy infrastructure across Solana protocols — The "forgotten code" attack vector exposed by this incident may prompt increased scrutiny of deprecated but still-on-chain contracts. Consider setting up alerts for similar security disclosures on competing AMMs (Orca, Meteora, Jupiter).

2. Track post-compensation TVL recovery — Watch whether Raydium's TVL stabilizes or grows over the next 30 days as a real-world gauge of user confidence restoration. A failure to recover would signal deeper sentiment damage than the initial muted market reaction suggests.