RAYDIUM JUST LOST $1.34 MILLION!
It happened because of a clever attacker who targeted long-forgotten liquidity pools that had been officially retired since 2021.
The team had migrated users to newer, active pools years ago and considered the old ones obsolete. But they never fully shut down the underlying smart contracts.
Those contracts stayed live on-chain, dormant, unmonitored, and apparently still holding funds until someone discovered a vulnerability.
The attacker faked proof of ownership, bypassed the remaining checks, and drained five of these zombie pools in one go. The main Raydium exchange and its active liquidity were completely untouched.
Fortunately, the project has stated that its treasury will cover the affected users, so no one should lose money from this incident.
Classic 2026 hack pattern: The parts everyone’s watching get hardened. The parts everyone forgot were still online? Those become the target.
Do you think the attacker used Claude Fable 5?💀