Ostium DEX Exploited for $18 Million on Arbitrum — Oracle Private Key Leak to Blame
$ALLO
Ostium, a real-world asset (RWA) perpetual contract platform on Arbitrum, suffered a devastating $18 million exploit**. The attacker drained approximately **$18 million in USDC from Ostium's liquidity vault by exploiting the protocol's own price-reporting infrastructure. Blockchain security firm Blockaid confirmed that the hacker used a pre-signed oracle report to trigger fake profitable trades. The attack marks one of the largest DeFi exploits in July, following the $9 million Bonzo Lend hack** on Hedera and the **$5.25 million Hedera network exploit earlier this month.
Risk reminder: Oracle manipulation and private key leaks remain critical vulnerabilities in DeFi. Always exercise caution when interacting with derivatives protocols.