Splash Patched the Bug. 2.4M ADA Is Still Gone and OADA Holders Are Still Trapped

Splash fixed the exploit. That's the easy part. The hard part is the 2.4 million ADA that walked out the door and isn't coming back on its own.

On Sept. 13, one actor ran two transactions against Splash's Cardano-based ADA/OADA StableSwap pool and pulled out 2,434,648 ADA and 1,988,222 OADA. Subtract the 9,870 ADA deposit and the net ADA drain lands at 2,424,778. One wallet. Two transactions. Whole pool gutted.

The bug itself is almost boring once you see it. The validator calculated a tradable reserve by subtracting accrued protocol fees from real balances. It never required that number to stay positive. It bounded fee changes only from below. And it didn't enforce swap direction. So when the tradable ADA reserve flipped negative, the contract accepted the trade anyway. A reserve-domain check or a two-sided fee bound would've stopped it. Splash says that plain in its own incident report.

But patched code doesn't mint liquidity. Immediately after the drain the pool held 10 ADA against roughly 1.44 million OADA. The tradable ADA reserve was negative. LP token balances sat unchanged, which is a polite way of saying the accounting never registered the crater. And OADA has no protocol-level redemption, so there's no back door either. The other OADA venues were close to empty, holding single or double-digit ADA.

Then comes the inventory problem nobody wants to talk about. At 14:53 UTC on Sept. 13, a Minswap V2 OADA/FLDT pool held 1,763,923 OADA against just 45,751 FLDT. That's a mountain of OADA sitting in a puddle. Reopen Splash with fresh ADA and arbitrageurs will use that discounted inventory to race for it. New liquidity gets eaten before it ever reaches the people who need an exit.

Optim Finance paused on Sept. 13 and removed its remaining liquidity. Its Sept. 15 update promised a full accounting of impacted addresses and assets. No restored swaps. No redemption. No timeline.

The real test isn't the patch. It's whether Splash brings fresh ADA liquidity or an actual redemption mechanism, because right now holders are staring at a closed door and a corrected smart contract doesn't open it.