Raydium has disabled its AMM program due to an attack; the entire loss of $1.34 million will be borne by the treasury.

According to Mars Finance, as reported by The Block, Raydium, a decentralized exchange within the Solana ecosystem, stated that a vulnerability in its deprecated AMM V3 program resulted in the theft of approximately $1.34 million in assets from five inactive liquidity pools. Affected pools included trading pairs such as RAY-SOL, USDC-RAY, and SRM-SOL. Attackers stole approximately 150,000 RAY, 5,600 SOL, and nearly 900,000 USDC. Raydium stated that all losses will be covered by its treasury, and current users are unaffected. This AMM program was deprecated in 2021, and the vulnerability stemmed from insufficient validation of LP mint, allowing attackers to bypass expected ratio checks. Raydium's current mainnet program is unaffected and is undergoing a separate security review.