Cardano DeFi Sector Hit by Splash DEX Exploit Worth Over $2.4 Million

A security exploit has hit Cardano's decentralized finance sector, with Splash DEX losing over $2.4 million in ADA and 1.98 million OADA.

The incident occurred on September 13, between 00:47 and 00:48 UTC, when the exploiter drained the affected pool through two transactions.

Splash attributed the exploit to a vulnerability in the pool's validator, which failed to verify that the resulting reserve remained positive.

The attacker manipulated the fee counter and then spent the pool's actual ADA balance below that counter, allowing them to withdraw both assets.