ME News reports that on July 30 (UTC+8), Ostium, an RWA trading platform on Arbitrum, tweeted that its off-chain infrastructure was compromised on July 15, resulting in the withdrawal of 23,752,746 USDC from the public OLP (Liquidity Provider) treasury. The attacker exploited access to the infrastructure to submit unauthorized BTC-USD price feeds and executed repeated long and short positions across eight transactions to extract invalid profits from the OLP treasury. This attack did not involve any smart contract logic vulnerabilities or a compromised governance multisig, and traders’ USDC margins were not withdrawn. The treasury’s circuit breaker mechanism triggered twice, preventing further withdrawals. The team froze the trading contract on the same day and resumed trading on July 23 in a new production environment. Ostium is currently collaborating with security firms to trace transactions on-chain and recover funds; a recovery plan for liquidity providers will be announced separately. (Source: Foresight News)
Ostium Reveals Attack Recap: 23.75M USDC Stolen from OLP Treasury
KuCoinFlashShare
Summary
Ostium, an Arbitrum-based RWA platform, confirmed a hack on July 15 (UTC+8), during which 23,752,746 USDC was stolen from the OLP treasury. Attackers exploited off-chain infrastructure to submit false BTC-USD price feeds and executed trades across eight transactions. On-chain data shows no compromise of smart contracts or governance multisigs. The treasury’s circuit breaker was triggered twice, and trading contracts were frozen. Trading resumed on July 23 in a new environment. Ostium is collaborating with security firms to trace the stolen funds. Altcoins to monitor may include tokens linked to RWA platforms as the market responds.
Source:Show original
Disclaimer: The information on this page may have been obtained from third parties and does not necessarily reflect the views or opinions of KuCoin. This content is provided for general informational purposes only, without any representation or warranty of any kind, nor shall it be construed as financial or investment advice. KuCoin shall not be liable for any errors or omissions, or for any outcomes resulting from the use of this information.
Investments in digital assets can be risky. Please carefully evaluate the risks of a product and your risk tolerance based on your own financial circumstances. For more information, please refer to our Terms of Use and Risk Disclosure.