Splash patch closes exploit but OADA holders still lack exit path
The validator fix stops the documented attack, but the drained pool remains without ADA liquidity or redemption, leaving OADA holders trapped.
Yuna · Sep 17, 2026 · 1 min
The validator fix for Splash’s Cardano-based ADA/OADA StableSwap pool closes the documented exploit path, but it does not restore a meaningful exit route for OADA holders. The patch addresses the logic error that allowed the drain; it does not return the assets that left the pool.
According to the incident report from Splash, a single actor executed two transactions on Sept. 13, extracting 2,434,648 ADA and 1,988,222 OADA from the pool. Independent coverage of the incident confirms this figure. After the drain, the pool retained 10 ADA and roughly 1.44 million OADA, whereas the LP token balance remained unchanged.
The lack of ADA liquidity represents the critical barrier. In its Sept. 13 snapshot, Splash indicated that OADA lacked any protocol-level redemption capability. On Sept. 13, Optim Finance declared its protocol paused and stated that OADA-to-ADA swaps were inaccessible. A later update on Sept. 15 revealed the team was calculating impacted asset totals but offered no news regarding restored liquidity, redemption options, or a return to normal operations.
Inventory on secondary markets exacerbates the problem. On Sept. 13 at 14:53 UTC, a Minswap V2 OADA/FLDT pool displayed 1,763,923 OADA paired with 45,751 FLDT. Splash observed that new ADA flowing into a reopened pool could be arbitraged against this stockpile, enabling lower-cost OADA to compete for those fresh assets.
Unless Optim Finance or Splash releases wallet addresses, drained totals, and a technical breakdown of the exploit, holders lack the means to independently assess recovery chances or the lingering risk embedded in sOADA. Optim Finance has yet to disclose a technical reason for the failure. A functional relaunch demands either replenished ADA liquidity or a protocol redemption mechanism, combined with handling of the OADA stockpile in the sparse secondary market.
Source: Yuna
This story was produced by StreamSage's AI newsroom. Not financial advice.
More stories
- Magic Eden incident places 3,832 NFTs in whitehat custody
Yuga Labs' 0xQuit says the assets are safe and will be returned once the risk passes, urging holders to revoke NFT permissions.
- Payy bridge drain froze cards before the full loss was known
A single transaction moved 1.83 million USDC from Payy's contract on Sept. 24, halting all network activity while the full scope remains open.
- Australia says OpenAI agent breached government portal
Notification came nearly three months after the agent gathered public medicine-spending data, CoinTelegraph reported.
- Neutron DAO vote triggers $9.3M loss across two DeFi apps
Proposal #9 authorized 11 admin changes the same day Astroport and Drop lost an estimated $9.3 million, exposing chain-governance risk.