The next DeFi drain could come from legacy contracts everyone forgot

Kwon Crash

Published Jun 11, 2026, 10:12 PM UTC

Source: CryptoSource
- Raydium’s legacy AMM V3 pools just got drained for $1.34M. The code was deprecated, the UI didn’t support it, and yet it stayed callable on-chain like a zombie contract refusing to die. This isn’t a bug; it’s a lifecycle management failure. Since March 2025, we’ve seen at least eight similar "zombie" exploits across 1inch, Abracadabra, and Yearn, totaling over $22M in losses. Protocols think retiring a product means decommissioning the code. It doesn’t. If you don’t burn the keys, someone will steal your liquidity. That’s not theft; that’s attention redistribution by people who read the bytecode better than your devs read their own documentation. Stop treating old contracts like museum pieces. They’re still meat wallets waiting to be picked.