Cash

Solana

Raydium

Tornado Cash

Tornado

<h3 id="tldr">TLDR</h3>
<ul>
 <li>Hackers extracted approximately $1.34 million from five dormant Raydium liquidity pools operating on Solana</li>
 <li>The breach resulted in the theft of around 150,000 RAY tokens, 5,600 SOL, and 893,700 USDC</li>
 <li>The vulnerability existed in an obsolete AMM program discontinued in 2021, leaving active pools untouched</li>
 <li>Raydium announced its treasury would provide complete restitution to all impacted participants</li>
 <li>Security firm PeckShield identified roughly 810 ETH of the pilfered assets flowing into Tornado Cash</li>
</ul>
<p>On June 10, Raydium, a Solana-based decentralized exchange, disclosed that malicious actors successfully exploited outdated infrastructure components, siphoning approximately $1.34 million worth of cryptocurrency.</p>
<div class="embed-x">
 <blockquote class="twitter-tweet">
  <p><a href="https://x.com/hashtag/PeckShieldAlert?src=hash&amp;ref_src=twsrc%5Etfw" rel="noopener noreferrer nofollow">#PeckShieldAlert</a> Specter reported that <a href="https://x.com/Raydium?ref_src=twsrc%5Etfw" rel="noopener noreferrer nofollow">@Raydium</a> has been drained of $1.3M worth of crypto</p>
  <p>The attacker was initially funded from <a href="https://x.com/hashtag/KuCoin?src=hash&amp;ref_src=twsrc%5Etfw" rel="noopener noreferrer nofollow">#KuCoin</a>, bridged the stolen funds from <a href="https://x.com/hashtag/Solana?src=hash&amp;ref_src=twsrc%5Etfw" rel="noopener noreferrer nofollow">#Solana</a> to ETH, and deposited 810 <a href="https://x.com/search?q=%24ETH&amp;src=ctag&amp;ref_src=twsrc%5Etfw" rel="noopener noreferrer nofollow">$ETH</a> to <a href="https://x.com/hashtag/TornadoCash?src=hash&amp;ref_src=twsrc%5Etfw" rel="noopener noreferrer nofollow">#TornadoCash</a> and 7 ETH to <a href="https://x.com/hashtag/FixedFloat?src=hash&amp;ref_src=twsrc%5Etfw" rel="noopener noreferrer nofollow">#FixedFloat</a>. <a href="https://t.co/Cm3nQwUfZV" rel="noopener noreferrer nofollow">pic.twitter.com/Cm3nQwUfZV</a></p>
  <p>— PeckShield <a href="https://x.com/PeckShieldAlert/status/2064729285894852609?ref_src=twsrc%5Etfw" rel="noopener noreferrer nofollow">June 10, 2026</a></p>
 </blockquote>
</div>
<p>The compromised liquidity pools had been inaccessible via Raydium’s user interface ever since the platform discontinued its AMM V3 program back in 2021. According to Raydium’s statement, neither current platform users nor any actively maintained liquidity pools experienced any impact.</p>
<h3 id="how-the-attack-happened">How the Attack Happened</h3>
<p>On-chain security analyst Specter revealed that the perpetrators utilized a fraudulent mint address to circumvent security validation protocols within the inactive pool infrastructure. The core vulnerability stemmed from inadequate verification processes for LP mints, creating an opportunity to sidestep proportion validation mechanisms.</p>
<p>The assailant successfully withdrew approximately 150,177 RAY tokens, 5,603 <a href="https://coincentral.com/solana-sol-price-buy-signal-flashes-as-mastercard-integrates-sol-into-ai-payment-system/" rel="noopener noreferrer nofollow">SOL</a>, and 893,700 USDC from the compromised pools. According to Specter’s investigation, the attacker initially received funding through the KuCoin exchange before transferring the illicit assets to the Ethereum blockchain.</p>
<p>PeckShield, a prominent blockchain security organization, monitored the movement of stolen cryptocurrency following its transfer to Ethereum. Their analysis revealed that approximately 810 ETH was funneled into Tornado Cash, while an additional seven ETH moved through FixedFloat.</p>
<p>Notably, Tornado Cash was delisted from U.S. Treasury Department sanctions in March 2025. Nevertheless, the utilization of this privacy protocol may continue to present obstacles for investigators attempting to recover or trace the diverted funds.</p>
<h3 id="raydium-will-reimburse-all-losses">Raydium Will Reimburse All Losses</h3>
<p>Raydium has publicly committed to utilizing its treasury reserves to compensate all financial damages stemming from this security breach. While the protocol emphasized that no current active users suffered losses, some participants maintained residual exposure through the deprecated pool contracts.</p>
<p>This marks the second occasion where Raydium has pledged to absorb user losses. Following an admin key security breach in December 2022 that affected operational pools, the project implemented a governance-approved compensation plan utilizing buyback fee revenue and vested team token allocations to restore liquidity provider funds.</p>
<p>The development team confirmed that all currently deployed mainnet programs remain secure and are presently undergoing comprehensive independent security audits.</p>
<p>Market response to the incident proved minimal. Raydium traded around $0.57, experiencing less than a 1% decline during the 24-hour window after the exploit became public. <a href="https://coincentral.com/solana-sol-casinos/" rel="noopener noreferrer nofollow">Solana</a> experienced a modest drop of nearly 2%, settling around $63.88 throughout the identical timeframe.</p>
<p>The RAY token demonstrated resilience, actually gaining more than 2% on the day news of the security breach emerged.</p>
<p>Raydium clarified that both its SDK and decentralized application infrastructure lack functionality for interacting with the legacy AMM V3 pools on the mainnet, effectively confirming the attack remained isolated to decommissioned code.</p>
<p>Security researchers from PeckShield and Specter maintain ongoing efforts to track the movement of stolen digital assets. According to currently available blockchain data, the exploitation remained entirely confined to obsolete infrastructure components without penetrating Raydium’s operational trading ecosystem.</p>
<p>The post <a href="https://blockonomi.com/raydium-ray-suffers-1-34m-exploit-on-deprecated-pools-full-reimbursement-confirmed/" rel="noopener noreferrer nofollow">Raydium (RAY) Suffers $1.34M Exploit on Deprecated Pools — Full Reimbursement Confirmed</a> appeared first on <a href="https://blockonomi.com" rel="noopener noreferrer nofollow">Blockonomi</a>.</p>

Raydium (RAY) Suffers $1.34M Exploit on Deprecated Pools — Full Reimbursement Confirmed

Table of Contents

Blockonomi

Other articles published on Jun 11, 2026

Join our free newsletter for daily crypto updates!