
Raydium Review
On-chain-checkable fees, Apache-licensed code and scoped audits
of 10
Raydium scores 8.2 out of 10 among decentralized exchanges. It publishes fee tiers you can check on chain, licenses its code under Apache 2.0, and links ten scoped audits by five named firms. It is Solana-only, and every program can be upgraded by a 3-of-4 multisig. The score comes from desk research of primary sources checked on 1 November 2026.
Overall score
8.2 / 10 = (10 + 9 + 8 + 4 + 10) ÷ 5; previously 6.0
Fee split
CPMM/CLMM 84% LPs, 12% buybacks, 4% treasury; AMM v4 88/12
Fee configs
18 CLMM tiers (0.01% to 4%) and 21 CPMM configs in the public API
Licence
Apache 2.0 on raydium-clmm, raydium-cp-swap and raydium-amm
Upgrade control
3-of-4 Squads multisig, 24-hour timelock; all programs upgradeable
Audits
10 linked reports, five firms, Q2 2021 to Q2 2026
Scores
Each criterion carries equal weight. The overall score is the average of these 5 scores — (10.0 + 9.0 + 8.0 + 4.0 + 10.0) ÷ 5 = 8.2.
Pros
- Fee split published per pool type: 84% LPs, 12% RAY buybacks, 4% treasury (88/12 on AMM v4)
- All 18 CLMM fee configurations readable from Raydium's public API with uniform splits
- Apache 2.0 detected on the CLMM, CP-swap and AMM repositories
- Ten linked audits by Kudelski, OtterSec, MadShield, Halborn and Sec3, each scoped and dated
- Upgrade control stated: 3-of-4 Squads multisig with a 24-hour timelock
Cons
- Solana only; no other network deployment
- Every program remains upgradeable, and no upgrade authority has been revoked
- A 3-of-5 treasury multisig with no timelock can modify fee configurations
- Docs list four typical CLMM tiers while 18 are live, so the API is the full reference
Raydium is rated in our decentralized exchange ranking, which scores nine protocols on five equally weighted criteria. This entry covers Raydium's CPMM, CLMM and AMM v4 programs on Solana, as described by its documentation, public API and GitHub repositories on 1 November 2026. The basis is desk research; we did not trade or provide liquidity.
How Raydium scores in decentralized exchanges
| Criterion | Finding (checked 1 Nov 2026) | Mark |
|---|---|---|
| Fee transparency | Tiers published with their AmmConfig values. The split is 84% LPs, 12% RAY buybacks and 4% treasury, or 88/12 on AMM v4. All 18 CLMM configs are readable from the public API. | 10 |
| Licence & code openness | Apache 2.0 on the CLMM, CP-swap and AMM repositories. | 9 |
| Immutability & governance | All programs upgradeable by a 3-of-4 Squads multisig with a 24-hour timelock. The roles and powers of each key are documented. | 8 |
| Chain coverage | Solana only. | 4 |
| Audit disclosure | Ten linked reports from five named firms, each dated by quarter and scoped to a program, Q2 2021 to Q2 2026. | 10 |
Every criterion carries the same weight, so the overall score is the plain average: (10 + 9 + 8 + 4 + 10) ÷ 5 = 41 ÷ 5 = 8.2 out of 10.
This is a re-score. The previous entry, checked on 24 July 2026, stood at 6.0 and said that no audits were named and upgradeability was not stated. Both statements are now out of date. Audit disclosure rose from 3 to 10 because Raydium's audits page lists ten linked reports by named firms. Immutability & governance rose from 4 to 8 because its admin documentation now sets out who can upgrade the programs and under what delay. The other three marks are unchanged.
Strongest criteria: fees and audits
Fee transparency (10)
Raydium's CLMM fee page lists the typical tiers with their on-chain AmmConfig index and tick spacing: 0.01%, 0.05%, 0.25% and 1.00%. It tells readers to confirm the live set against the public API. On 1 November 2026 that endpoint returned 18 CLMM configurations from 0.01% to 4%, and 21 CPMM configurations from 0.005% to 4%. Every one carried the same protocol and fund rates. The buybacks page states the split: 84% of the fee to liquidity providers (LPs), 12% to RAY buybacks and 4% to the treasury on CPMM and CLMM, and 88% and 12% on AMM v4. On a $1,000 swap in a 0.25% CLMM pool, the fee is $2.50: $2.10 to LPs, $0.30 to buybacks and $0.10 to the treasury. A trader can find any pool's rate before swapping and check it on chain. CPMM pools can add an optional creator fee on top, which is shown before you sign.
Audit disclosure (10)
The audits page lists Kudelski Security (Q2 2021), OtterSec (three reports, Q3 2022), MadShield, now OShield (Q2 2023 and Q1 2024), Halborn (Q4 2024 and Q2 2025) and Sec3 (Q3 2025 and Q2 2026). Each entry names the program it covers, from the original AMM to the 2026 CLMM update for limit orders and dynamic fees, and links the report. That level of scoping is what lets a reader match an audit to the code it reviewed. Raydium also says Neodyme reviewers have worked through bug-bounty agreements, but it gives no reports for that, so we do not count it. An Immunefi bounty runs alongside. An audit is not insurance.
Weaker criteria
Immutability & governance (8): disclosed, still upgradeable
Raydium's admin and multisig page says every program is upgradeable: AMM v4, CPMM, CLMM, farms, LaunchLab, the locker, routing and Stable Swap. The upgrade authority is a 3-of-4 Squads multisig with a 24-hour timelock. Its signers are core team members on air-gapped devices, though they are not named. Raydium states it has not revoked upgrade authority on any program. The disclosure goes further than the other Solana venues here. It also names a 3-of-5 treasury multisig with no timelock, which can create and modify CLMM fee configurations and update fees on existing AMM v4 pools. It names a single hot-wallet key that can only settle CLMM limit orders.
That plain statement is what the rubric rewards. Two findings keep the mark below Uniswap's 10, which documents non-upgradeable core contracts. Everything here can be changed, and fee settings can be edited without a delay. Raydium's docs also record a December 2022 incident in which a compromised AMM v4 pool authority key was used to drain several pools. After it, the authority roles were moved to multisig.
Licence & code openness (9)
GitHub detects Apache 2.0 on the raydium-clmm, raydium-cp-swap and raydium-amm repositories. That is a recognized open-source licence with no change date or revocation clause, and it matches the reading from the previous check. The mark is unchanged.
Chain coverage (4): narrow scope
Raydium is deployed on Solana only. Four is the mark this category gives every single-chain protocol. It records reach, not a defect in the protocol.
What the score does not cover
The rating does not measure liquidity depth, execution, interface quality, LaunchLab tokens, Raydium Perps (run on Orderly Network) or RAY as an investment. It does not assess access rules either. Raydium's site disclaimer states the protocol is not available to US residents or to residents of a list of other countries and regions. Because anyone can launch a token or a pool, copycat tokens are a common risk. Read our guide to avoiding wallet scams and phishing before trading new listings.
Raydium vs Orca and Jupiter
The two other Solana protocols in the ranking are the closest comparison. Their marks below are as recorded on 1 November 2026.
| Criterion | Raydium | Orca | Jupiter |
|---|---|---|---|
| Fee transparency | 10 | 9 | 9 |
| Licence & code openness | 9 | 2 | 2 |
| Immutability & governance | 8 | 7 | 4 |
| Chain coverage | 4 | 4 | 4 |
| Audit disclosure | 10 | 9 | 10 |
| Overall | 8.2 | 6.2 | 5.8 |
The licence is the decisive difference. Orca and Jupiter both score 2, while Raydium's code is Apache-licensed. Across the full ranking, Raydium ties with PancakeSwap at 8.2. Ties are listed alphabetically, so PancakeSwap appears first. Only 1inch and Uniswap, both at 8.4, score higher.
Who this rating suits
The score suits a Solana user or developer who wants to check fees on chain, read and reuse the code under a permissive licence, and know exactly who can change the programs. It is less useful to someone who needs a DEX on another network, or who wants contracts that cannot be upgraded. If concentrated liquidity is new to you, read how automated market makers work before choosing a fee tier. A high mark here reflects disclosure, not a promise about any trade or pool.
How it compares

1inch
Audited, MIT-licensed, non-upgradable routing across 18 networks

Uniswap
Non-upgradeable core contracts and fee splits stated per tier

PancakeSwap
The most linked audit reports and a GPL-licensed core

Curve
Widest chain list and a full audit archive, with non-upgradeable pools

Orca
Published fee tiers and named, dated Whirlpools audits on Solana

Aerodrome
Plain disclosure of which parts stay upgradeable

Jupiter
Published per-pair swap fees and a large linked audit archive

SushiSwap
Wide EVM deployment: 22 active networks for v2 and v3 pools
Sources
Scored from published primary sources rather than hands-on use. Every figure above comes from one of the pages below, on the date shown. Manufacturers change prices and specifications without notice — if something here no longer matches the source, tell us and we will correct it.
- 1.Raydium docs — CLMM fees — checked
- 2.Raydium docs — RAY buybacks (fee split) — checked
- 3.Raydium API — CLMM fee configurations — checked
- 4.Raydium API — CPMM fee configurations — checked
- 5.Raydium docs — Admin and multisig — checked
- 6.Raydium docs — Audits — checked
- 7.Raydium docs — Responsible disclosure (bug bounty) — checked
- 8.Raydium docs — Attack vectors (December 2022 key compromise) — checked
- 9.GitHub — raydium-io/raydium-clmm (Apache 2.0) — checked
- 10.GitHub — raydium-io/raydium-cp-swap (Apache 2.0) — checked
- 11.GitHub — raydium-io/raydium-amm (Apache 2.0) — checked
- 12.Raydium — Disclaimer (availability) — checked
Frequently asked questions
Why does Raydium score 8.2?
Its marks are 10 for fees, 9 for licence, 8 for immutability and governance, 4 for chain coverage and 10 for audits. The plain average is 8.2. Disclosure is strong across the board; Solana-only deployment is the main drag.
Is Raydium audited?
Yes. As of 1 November 2026, its audits page links ten reports by Kudelski Security, OtterSec, MadShield (now OShield), Halborn and Sec3. Each names the program reviewed. The previous version of this review, which said no audits were named, was out of date.
Can Raydium's programs be changed?
Yes. Raydium documents that all programs are upgradeable by a 3-of-4 Squads multisig with a 24-hour timelock. A separate 3-of-5 treasury multisig with no timelock can edit fee configurations.
Why did Raydium's score rise from 6.0?
Two marks changed on the 1 November 2026 check. Audit disclosure went from 3 to 10 once the audits page listed named, linked reports. Immutability and governance went from 4 to 8 once the admin documentation stated upgrade control and timelocks.
How does Raydium compare with Orca and Jupiter?
On marks recorded on 1 November 2026, Raydium's 8.2 is well ahead of Orca's 6.2 and Jupiter's 5.8. The largest gap is the licence: Raydium is Apache-licensed, while both peers score 2 there.
Nothing here is financial advice. Editorial policy · How we score · How we're funded.