Raydium DEX’s AMM Program Exploited For $1.34 Million — Here’s What Went Wrong
Raydium (RAY), a decentralized alternate on the Solana (SOL) blockchain, mentioned Wednesday that it had suffered a $1.34 million exploit tied to its retired automated market maker, or AMM, V3 program.
Raydium Pools Drained
The protocol mentioned the attacker eliminated about 150,000 RAY, 5,600 SOL, and almost 900,000 of Circle’s USDC stablecoin from Raydium swimming pools involving RAY-SOL, USDC-RAY, and SRM-RAY.
Raydium attributed the compromise to a weak spot in how the older AMM V3 dealt with liquidity supplier (LP) mints. The platform mentioned the vulnerability “stemmed from inadequate validation of the LP mints, which in observe allowed the attacker to bypass supposed proportion checks.
According to the outline of the mechanism, as a result of the legacy AMM V3 program didn’t correctly confirm the LP mint handle, an attacker was in a position to create a brand new mint and use it because the LP token, letting it evade the checks that have been supposed to regulate how property might be accounted for within the Raydium swimming pools.
The alternate emphasised that the affected AMM V3 program was now not obtainable by Raydium’s interface, explaining that the legacy AMM V3 program was phased out in 2021 and was successfully unreachable through Raydium’s present consumer instruments.
Funds Traced Across Two Blockchains
Details on the alleged laundering path have been supplied by PeckShield, which described how the attacker’s funds have been initially funded through KuCoin after which bridged from Solana to Ethereum (ETH).
PeckShield said that 810 ETH had already been despatched to Tornado Cash, and that 7 ETH had been moved to FixedFloat, framing each strikes as a part of an lively effort to launder the Raydium funds.
In Raydium’s personal breakdown of the exploit, the agency reiterated that its present applications have been unaffected by the incident, and mentioned it’s in the midst of safety overview work on all mainnet applications by Raydium core contributors.
Featured picture created with OpenArt; chart from TradingView.com
