‘No current users affected’ – Raydium responds after $1.34mln exploit

How did an attacker take advantage of a program that Raydium had abandoned years before?