Risk Radar

/ 4 developments

Crypto Risk Monitor --- September 15, 2026

CEXVia tracks Kraken UAE forced liquidation, the Splash OADA/ADA exploit, XPR Network recovery and Ampleforth Proposal 54 treasury risk.

September 15, 2026Last updated 10:30 UTC5 min read

September 15 brings four publishable developments. Kraken UAE has moved from a withdrawal window into forced liquidation for seven delisted assets. Splash's Cardano OADA/ADA exploit is now sufficiently quantified to upgrade from yesterday's Developing watch item. XPR Network has published materially better recovery accounting after the proton.swaps incident. Ampleforth Proposal 54 is now in active voting and still exposes almost the entire reported liquid USDC treasury if approved and executed.

Today's Details: Kraken UAE, Splash/OADA, XPR/MetalX, and Ampleforth Proposal 54.

① Today's Highest-Priority Alerts

----------------------------------------------------------------------------------------------------------------------- Risk Entity Event Time Latest Status Evidence Continue New vs Monitoring Previous Day -------------- ------------ -------------- --------- -------------- ------------------------ ------------ ------------- High Kraken UAE Seven-asset Sep. 15 Withdrawals Official Yes New: forced for XMR, DASH, liquidation liquidation USDD, DAI, starts today USDS, USDE and ZEC closed Sep. 14 14:00 UTC; remaining balances enter Sep. 15--25 liquidation.

Critical Splash / OADA/ADA Sep. 15 2,434,648.42 Project/Media/On-chain Yes New: loss and Optim StableSwap ADA and validator Finance exploit 1,988,222.18 flaw OADA removed quantified in the main drain; net ADA drain 2,424,778.42 ADA; OADA liquidity impaired.

Critical XPR Network proton.swaps Sep. 15 \~2.1B XPR On-chain/Security Yes New: detailed / MetalX exploit and affected; recovery recovery \~1.85B XPR accounting (87%) recovered; \~277M XPR + 310K METAL escaped to CEXs before freeze.

High Ampleforth Proposal 54 Sep. 15 Proposal On-chain/Security Yes New: voting treasury risk requests 2.5M active USDC from a timelock reported near 2.538M USDC; voting active through Sep. 16; no confirmed loss. -----------------------------------------------------------------------------------------------------------------------

② Exchange Exit / Shutdown / Withdrawal Risk

Kraken UAE --- High

The withdrawal cutoff passed at 14:00 UTC on September 14 for XMR, DASH, USDD, DAI, USDS, USDE and ZEC. Remaining balances now enter Kraken's September 15--25 liquidation window. This is a pre-announced UAE-specific delisting process, not evidence of Kraken insolvency. The risk has changed from withdrawal-deadline risk to forced-execution risk.

BitMEX --- High / Immediate

September 16 at 12:00 UTC remains the next hard deadline for early settlement of flagship XBT/ETH contracts before final exchange closure on September 23.

BitMart / AscendEX / Orionx

No newer verified recovery or withdrawal milestone justifies repeating prior Detail pages.

③ Regulation and Licensing

No new regulator enforcement action in this scan exceeds the standalone-Detail threshold. The EU Cyber Resilience Act's newly operational security-reporting regime remains active, and ASIC's September 30 transition remains on the watchlist.

Ampleforth Proposal 54 is not public regulation, but it is an asset-control risk: governance authorization can move treasury funds without a smart-contract exploit.

④ Hacks / Vulnerabilities / Asset Loss

Splash / OADA --- Critical

The September 13 OADA/ADA StableSwap exploit is now quantified. The main drain removed 2,434,648.42 ADA and 1,988,222.18 OADA; after the attacker's ADA input, net ADA drain was 2,424,778.42 ADA. Current reporting attributes the failure to a validator reserve calculation that failed to reject a negative tradable-reserve state. Secondary OADA liquidity was then attacked, impairing the synthetic asset's practical exit market.

XPR / MetalX --- Critical, recovery improved

A detailed on-chain reconstruction says roughly 2.1B XPR was affected. About 1.85B XPR, or roughly 87%, was recovered to governance control, while approximately 277M XPR and 310K METAL escaped to centralized exchanges before the freeze.

Chainflip / Symbiosis --- Critical continuing

No newer official milestone supersedes the existing CEXVia Detail pages.

⑤ User Complaints / Operational Anomalies

No Community-only complaint cluster reached the threshold for a new platform-wide High/Critical alert. Kraken UAE complaints after the cutoff must not be mislabeled as an unexpected freeze because the deadline was officially pre-announced. Specific forced-liquidation prices remain unverified until execution.

⑥ On-chain and Market Anomalies

OADA is today's main market anomaly because a pool exploit propagated into thin secondary liquidity and damaged the synthetic asset's exit mechanism. XPR represents a different risk: rapid governance intervention recovered most funds still inside network control, but the recovery itself highlights administrative intervention boundaries. Ampleforth demonstrates a third pattern: governance can create material treasury risk without any code exploit.

⑦ Watchlist

----------------------------------------------------------------------- Window Event What CEXVia Is Watching ----------------------- ----------------------- ----------------------- Sep. 15--25 Kraken UAE Forced liquidation execution and pricing

Immediate Splash / Optim CEX freezes, OADA liquidity, compensation

Immediate XPR / MetalX Recovery of CEX-bound XPR/METAL

Sep. 16 Ampleforth Proposal 54 vote result

Sep. 16 12:00 UTC BitMEX XBT/ETH early settlement

Sep. 23 04:00 UTC BitMEX Final exchange closure

Sep. 30 ASIC Australia licensing transition -----------------------------------------------------------------------

⑧ No New Development Today, but Still High Risk

Liquid Network --- Critical: staged recovery remains incomplete. Nomic / Osmosis --- Critical: re-peg governance/software execution remains pending. BitMart --- Critical: no verified recovery percentage or withdrawal timetable. Orionx --- Critical: permanent shutdown/restitution remains unresolved. AscendEX --- Critical: withdrawal/claims recovery remains uncertain. Coldcard --- Critical: stolen-fund laundering remains under monitoring.

FAQ

What changed most materially today?

Kraken UAE entered forced liquidation, while Splash and XPR gained materially better incident accounting.

Is Kraken UAE experiencing an unexpected withdrawal crisis?

No. The cutoff was part of a pre-announced regional delisting timetable.

How much ADA was drained from Splash?

Current accounting puts the net ADA drain at 2,424,778.42 ADA.

Has XPR recovered everything?

No. About 87% of affected XPR was reported recovered; a smaller portion escaped to CEXs.

Has Ampleforth lost 2.5M USDC?

No. Proposal 54 is a live governance risk; no confirmed transfer or loss is established.

Why are there four Detail pages?

Only four events crossed the factual-depth, risk-significance and search-value threshold without duplicating existing pages.