Splash DEX exploit drains 2.4M ADA; OADA holders face liquidity crisis
In the past 24 hours, Cardano's decentralized exchange (DEX), Splash, suffered a significant security exploit on September 13, resulting in the loss of over 2.4 million ADA and 1.98 million OADA tokens. Despite implementing a code fix to address the vulnerability, OADA holders remain trapped without a viable exit strategy, as the pool now holds only 10 ADA and 1.44 million OADA. This incident underscores the challenges in restoring liquidity and trust within Cardano's DeFi ecosystem.
Key points
- Splash DEX Exploit: An attacker drained 2,434,648 ADA and 1,988,222 OADA from Splash's ADA/OADA StableSwap pool, leaving it with only 10 ADA and a negative tradable reserve.
- Code Fix Implemented: Splash's validator patch addresses the exploit path but does not recover the lost funds or resolve the liquidity issues for OADA holders.
- OADA Holders Affected: OADA lacks a protocol-level redemption mechanism, and other liquidity venues are nearly empty, trapping holders without a viable exit.
- Optim Finance Pauses Operations: Following the exploit, Optim Finance paused its protocol and has not announced restored liquidity or redemption, highlighting the broader impact on Cardano's DeFi ecosystem.
Sources
- Splash Fixes Cardano Exploit but 2.4M ADA Still Missing, OADA Holders TrappedCVJ.AI · September 17, 2026
- Splash patches Cardano exploit, but 2.4M ADA gone and OADA holders stuckCoinMarketCal · September 17, 2026
- Cardano’s Splash fix patches the exploit, but leaves 2.4M ADA missing and holders trappedCryptoSlate · September 17, 2026
- Cardano Splash exploit drains 2.4M ADA; OADA holders trapped without redemptionLeoDex News · September 17, 2026
AI-generated from public news sources. Not financial advice.

