Raydium Confirms $1.34M Drain on Deprecated AMM V3, Pledges Treasury Compensation

§ 01 Executive Snapshot

• What: Raydium confirmed a $1.34 million drain from its deprecated AMM V3 program due to a vulnerability.
• Who: Raydium DEX, attacker, security firm PeckShield, and onchain monitors.
• Why it matters: This incident highlights the risks associated with deprecated contracts and the importance of security in DeFi protocols.

§ 02 Key Developments

• The attacker drained approximately $1.34 million from the deprecated AMM V3 program, affecting five legacy pools.
• The stolen assets included roughly 150,177 RAY, 5,603 SOL, and 893,700 USDC.
• Raydium confirmed that current users were unaffected, and full compensation will come from the protocol treasury.

§ 03 Strategic Context

• The AMM V3 program was deprecated in 2021, and the vulnerability arose from a logic flaw in its contract, not a key compromise.
• Raydium serves as a significant liquidity venue on the Solana blockchain, with a total value locked of approximately $797 million.

§ 04 Strategic Implications

• Immediate consequence: The incident raises concerns about the security of legacy contracts in DeFi, prompting a review of all mainnet programs.
• Long-term implication: This event could influence user trust and future security protocols for decentralized exchanges.

§ 05 Risks & Constraints

• Potential risk: Vulnerabilities in deprecated contracts may expose protocols to attacks if not adequately managed.
• Potential risk: The incident could lead to increased regulatory scrutiny on DeFi protocols and their security measures.

§ 06 Watchlist / Forward Signals

• Forward signal: Security reviews of all Raydium mainnet programs are underway, which may lead to future protocol updates.
• Forward signal: Observing the outcomes of any regulatory actions following the incident could provide insights into the evolving regulatory landscape for DeFi.