Security

Raydium's AMM and staking programs have been reviewed by engineers and security teams from across Solana.

---

Audits

Program	Auditor	Date	Report
Order-book AMM	Kudelski Security	Q2 2021	View
Concentrated liquidity (CLMM)	OtterSec	Q3 2022	View
Updated order-book AMM	OtterSec	Q3 2022	View
Staking	OtterSec	Q3 2022	View
Order-book AMM & OpenBook migration	MadShield	Q2 2023	View
Constant product AMM (CPMM)	MadShield	Q1 2024	View

Members of the Neodyme team have also performed extensive reviews via bug bounty agreements.

---

Bug bounty

Raydium runs an active bug bounty program in partnership with ImmuneFi.

See the Bug bounty page for full details on scope, rewards, and how to submit.

---

Access controls

Raydium's programs are owned by the BPF Upgradeable Loader, allowing an Upgrade Authority to push updates when necessary.

All program Upgrade and Admin Authority is held under a Squads multi-sig.

Programs are fully upgradeable (labeled as such on Solscan). All changes are reviewed by core team members before implementation. For larger updates, Raydium engages experienced security whitehats for review via bug bounties.

Raydium does not currently employ a timelock for upgrades. Timelock mechanisms are planned as code moves toward open-sourcing and community governance.

Core programs

Program	Address
Liquidity Pool AMM	675kPX9MHTjS2zt1qfr1NYHuzeLXfQM9H24wFSUt1Mp8
Stable Swap AMM	5quBtoiQqxF9Jv6KYKctB59NT3gtJD2Y65kdnB1Uev3h
Concentrated Liquidity (CLMM)	CAMMCzo5YL8w4VFF8KVHrK22GGUsp5VTaW7grrKgrWqK
Staking	EhhTKczWMGQt46ynNeRX1WfeagwwJd7ufHvCDjRxjo5Q
Farm Staking	9KEPoZmtHUrBbhWN1v1KWLMkkvwY6WLtAVUCPRtRjP4z
Ecosystem Farms	FarmqiPv5eAj3j1GMdMCMUGXqPUvmquZtMy86QH6rzhG
Upgrade Authority	GThUX1Atko4tqhN2NaiTazWSeFWMuiUvfFnyJyUghFMJ

Auxiliary programs

Program	Address
AMM Routing	routeUGWgWzqBWFcrCfv8tritsqukccJPu3q5GPP3xS
AcceleRaytor	9HzJyW1qZsEiSfMUf6L2jo3CcTKAyBmSyKdwQeYisHrC
Upgrade Authority	8aSRiwajnkCP3ZhWTqTGJBy82ELo3Rt1CoEk5Hyjiqiy