Cashio Money · interactive mechanism simulation

Real depositors lock Saber LP tokens 1:1 for CASH. But the crate program never checked the deposited token's mint address — an attacker can wrap a worthless fake token in a fabricated "bank" account and mint CASH against nothing. Drag validation strength to zero (as shipped) and watch the peg die.
Real depositors Saber LP tokens Cashio crate/bank validation: 0% CASH mint 0 CASH Attacker fabricates token Fake SPL + bank acct mint field never checked CASH/USDC pool price: $1.00
Real collateral locked
$0 USD
Legit CASH minted
0
Fake CASH minted
0
CASH price
$1.00
Parameters — edit me
0%
0.8/s
1.2/s
120M
Controls

Illustrative simulation. Defaults mirror the researched Cashio exploit (missing mint-address validation on deposited "bank" accounts let ~2B CASH be minted against fake collateral, crashing price from $1 to ~$0.00005), but trade sizes, timing and the price curve are simplified for visualization — not live onchain data. Part of The Onchain Experiment Atlas.