Splash Patches Exploit but Leaves 2.4M ADA Out of Reach
Cardano DEX Splash fixed a major vulnerability, but OADA holders remain trapped without an easy way to redeem funds.
Advertising disclosure: we may earn a commission when you join an operator via links on this page, at no cost to you. This never dictates our ratings. How we make money
Key takeaways
- An exploit drained a net total of 2.42 million ADA from the Splash protocol.
- Developers patched the security flaw, but stolen assets remain unrecovered.
- OADA holders cannot redeem tokens at the protocol level and face thin market liquidity.
Cardano decentralized exchange Splash patched the security flaw that drained 2.42 million ADA from its protocol. Good news, mostly. But the fix offers virtually no immediate relief to trapped users.
Deploying the update stopped the ongoing exploit in its tracks. Still, the protocol's recovery mechanisms are severely bottlenecked. The net loss remains at 2.42 million ADA, and the damage has already spilled over into associated tokens.
Holders Left Stranded
The real trouble now centers on OADA. The token lacks a working protocol-level redemption mechanism, so users can't swap it back through standard contract channels.
That leaves open markets as the sole exit. Problem is, liquidity there is razor-thin. With a massive pool overhang, anyone trying to exit their OADA position faces extreme slippage and heavy discounts. The code works now. The money doesn't.
Why it matters
Patching a smart contract bug doesn't magically fix an ecosystem. When native redemptions freeze up and market liquidity dries out, asset holders take the hit whether the code is secure or not. If you hold synthetic or wrapped tokens on smaller DEXs, risk management doesn't end when the patch deploys.
Source: CryptoSlate
Top Crypto Casinos Right Now
🇦🇺 Showing sites that accept players from Australia Change country
Advertising disclosure: we may earn a commission when you join an operator via links on this page, at no cost to you. This never dictates our ratings. How we make money
More info Less info
Why we chose it: A US-oriented casino that turns away only New Jersey. The cashier takes crypto, but the site publishes fewer specifics than any operator we list.
- KYC
- Required
Restricted countries: New Jersey (US).
More info Less info
Why we chose it: One of the widest crypto line-ups of any book we list - seven coins with fast payouts - aimed squarely at Asia and Latin America rather than the US or Western Europe.
- Licence
- Curacao
Restricted countries: Austria, Belgium, Bulgaria, Cyprus, Czechia, Germany, Denmark, Estonia and 21 more.
More info Less info
Why we chose it: Built for American bettors, priced accordingly. Biggest welcome bonus of the five, attached to the heaviest rollover of the five.
- Online since
- 1994
- Licence
- Curaçao
- Payout time
- 24–48 hours (crypto)
- Wagering
- 18x sportsbook / 30x casino
- KYC
- Required
Restricted countries: Belgium, Costa Rica, Croatia, Curaçao, Aruba, Sint Maarten, Caribbean Netherlands, France and 11 more.
Daniel Okoro
Daniel tracks crypto regulation and policy across the US, EU and Asia, with a decade in financial journalism.