Solana-based decentralized exchange Raydium has announced plans to replenish the over $1.34 million lost in a recent exploit, utilizing funds from its internal treasury. The incident, which occurred on Wednesday, targeted five deprecated liquidity pools within Raydium’s legacy automated market maker (AMM) program, a system that had been phased out in 2021.
Key Takeaways
- Solana DEX Raydium experienced an exploit resulting in over $1.34 million in stolen assets.
- The breach affected older, deprecated liquidity pools within its AMM V3 program.
- Raydium intends to repay the affected funds using its treasury, assuring current users that their assets are unaffected.
- The exploit adds to a growing trend of DeFi vulnerabilities, with a concurrent rise in AI-powered security research.
- This event occurs shortly after advancements in AI cybersecurity tools, raising questions about potential AI involvement in future exploits.
The exploit led to the unauthorized removal of liquidity, resulting in the theft of Solana (SOL), USD Coin (USDC), and Raydium’s native token, RAY. According to a statement from a Raydium contributor, pseudonymous user 0xInfra on X, the breach did not impact current users or interact with the platform’s active user interface, as the targeted pools were no longer accessible through the main application. The attacker successfully bypassed validation logic in the deprecated program, enabling the minting of fraudulent liquidity provider tokens.
Raydium has clarified that the firm’s current mainnet programs are not susceptible to this specific vulnerability and that the exploit was not a result of a compromised key or an authority-level issue. The exchange committed to covering the losses through its treasury, aiming to restore confidence and mitigate the financial impact on the ecosystem.
Raydium is aware of an exploit involving unauthorized removal of liquidity from its legacy AMM V3 program which was previously phased out in 2021.
No current users of Raydium are affected by this exploit or would have been able to interact with these pools through the UI since…
— Infra | Raydium (@0xINFRA) June 10, 2026
This security incident is the latest in a series of escalating vulnerabilities affecting decentralized finance (DeFi) protocols. In recent months, platforms like KelpDAO and Drift Protocol on Solana have faced significant exploits. The situation is further complicated by the increasing sophistication of threat actors and the emerging role of artificial intelligence in both identifying and potentially perpetrating cyberattacks within the blockchain space.
While there is no direct evidence linking artificial intelligence to the Raydium exploit, industry analysts have previously noted AI’s transformative impact on security auditing and exploit discovery. The timing of the Raydium incident, occurring shortly after private AI firm Anthropic released advanced cybersecurity-focused AI models, including an upgraded version of Mythos and a more accessible version called Claude Fable 5, has intensified discussions around the dual-use nature of these rapidly developing technologies.
Following the exploit announcement, Raydium’s native token (RAY) experienced a moderate decline. The token is trading approximately 2% lower in the last 24 hours, reflecting broader market downturns and the specific impact of the security breach. Despite this, the project’s commitment to treasury-backed repayment signals a proactive approach to addressing the fallout and reinforcing trust within its user base.
Long-Term Technological Impact on the Blockchain Industry
The Raydium exploit, particularly in the context of recent AI-driven vulnerability discoveries, underscores a critical inflection point for blockchain security and development. The reliance on legacy smart contract code, even in deprecated systems, highlights the persistent need for rigorous auditing and upgrade pathways across all Layer 1 and Layer 2 ecosystems. As AI tools become more adept at identifying complex code vulnerabilities, the industry must accelerate the adoption of AI-assisted code analysis and formal verification methods to proactively secure smart contracts. This could lead to the development of more robust smart contract languages and more sophisticated on-chain security monitoring systems. Furthermore, the incident emphasizes the importance of decentralized identity and reputation systems, potentially allowing protocols to better vet external contract interactions. The race between AI-powered exploit discovery and AI-powered defense mechanisms will likely define a new era of cybersecurity in Web3, pushing innovation in automated threat detection, bug bounty programs, and secure development lifecycles. Ultimately, this will necessitate a deeper integration of AI not just in security, but also in optimizing blockchain performance, enhancing user experience on decentralized applications (dApps), and enabling more sophisticated autonomous agents within the decentralized web.
Source: : decrypt.co