Ostium suffers $18 million exploit as oracle attack wave continues to hit DeFi

FinanceOstium suffers $18 million exploit as oracle attack wave continues to hit DeFiA hacker used Ostium's own price-reporting infrastructure against the protocol, submitting falsified future-dated oracle data to manufacture fake trading profits and trigger an $18 million payout.By Oliver Knight|Edited by Cheyenne Ligon Jul 15, 2026, 3:27 p.m. 2 min readMake preferred on ShareShare this articleCopy linkX iconX (Twitter)LinkedInFacebookEmailMake preferred on SummaryShowAn attacker exploited a registered component of Ostium's price-feed automation system, submitting oracle reports with manipulated future timestamps to make losing trades appear profitable — triggering an $18 million USDC payout from the protocol's vault.The attack follows a string of similar keeper and oracle exploits in DeFi, including a $6 million drain from Summer.fi last week, highlighting persistent vulnerabilities in the automated infrastructure protocols rely on to bring real-world price data onchain.Ostium, a perpetuals exchange on Arbitrum focused on real-world assets like gold, forex, and equity indices, had raised $27.8 million in funding and processed over $50 billion in trading volume before the incident.An attacker drained approximately $18 million in USDC from Ostium's liquidity vault on Arbitrum in an oracle manipulation exploit detected by blockchain security firm Blockaid, onchain data shows.According to Blockaid's alert, the attacker leveraged a registered PriceUpKeep forwarder, a component of Ostium's automated infrastructure, to submit oracle price reports with future-dated timestamps. The manipulated reports created the appearance of profitable trades, which triggered an $18 million USDC payout from the vault.Ostium is a decentralized perpetuals exchange on Arbitrum that allows users to trade real-world assets including commodities, forex, and equity indices, with up to 200x leverage, settling in USDC. Ostium uses a custom price-feed system to track real-world asset prices, wi…

Ostium suffers $18 million exploit as oracle attack wave continues to hit DeFi

Coins in this story

Related stories

Crypto Long & Short: To ETH or not to ETH — is SOL the better diversifier?

The privacy paradox of protecting kids online

High-level White House meeting said to be planned to hash out Clarity Act ethics section