{"id":9229,"date":"2026-07-16T13:50:58","date_gmt":"2026-07-16T10:50:58","guid":{"rendered":"https:\/\/handoli.com\/index.php\/2026\/07\/16\/more-oracle-exploits-as-ostium-loses-over-20m\/"},"modified":"2026-07-16T13:50:58","modified_gmt":"2026-07-16T10:50:58","slug":"more-oracle-exploits-as-ostium-loses-over-20m","status":"publish","type":"post","link":"https:\/\/handoli.com\/index.php\/2026\/07\/16\/more-oracle-exploits-as-ostium-loses-over-20m\/","title":{"rendered":"More oracle exploits as Ostium loses over $20M"},"content":{"rendered":"
<\/div>\n

Ostium, a decentralized perpetual futures exchange, has been hacked on the Arbitrum network via a suspected private key compromise of its oracle signer.<\/p>\n

A number of crypto security<\/a> firms<\/a> flagged<\/a> suspicious outflows, with estimates loss estimates ranging from $18 to over $23 million.<\/p>\n

Ostium\u2019s official X account confirmed<\/a> an \u201cissue\u201d with its OLP vault shortly thereafter.<\/p>\n

\n
\n
\n

We are aware of the issue with the OLP vault. We have paused all trading. The team is investigating.<\/p>\n

\u2014 Ostium (@Ostium) July 15, 2026<\/a><\/p><\/blockquote>\n<\/div>\n<\/figure>\n

Read more: <\/em>Supra patched oracle on 11 other chains before $9M Hedera exploit<\/em><\/a><\/p>\n

Ostium allows for trading perpetual futures of stocks, commodities, and forex, and held approximately $63 million of assets, pre-hack, according to DeFiLlama data<\/a>.<\/p>\n

Its OLP vault acts as the protocol\u2019s settlement layer, into which users deposit USDC to open trades on the platform.<\/p>\n

Decurity, highlighting an example transaction, explained<\/a> that \u201cthe attacker fed self-signed favorable prices to open and immediately close trades at a profit, draining ~11.86M USDC from the OstiumVault.\u201d<\/p>\n

\"\"<\/a>
Net transfers during one of the attack transactions, in which the OLP vault sends a total of almost $12 million to the attacker.<\/figcaption><\/figure>\n

Read more: <\/em>Cap \u2018stabledrop\u2019 U-turn sees cUSD drop $23M, founder denies self dealing claims<\/em><\/a><\/p>\n

DeFi dangers<\/h2>\n

The loss comes just four days after $9 million was lost from Bonzo Finance on the Hedera network, also due to an exposed price oracle.<\/p>\n

Supra, the firm behind the vulnerable oracle had previously patched deployments on 11 other chains in the days leading up to the exploit.<\/p>\n

Last week, Summer Finance was hacked, also via a price manipulation attack, losing $6 million. It\u2019s announced today that it will not be able to recover from the incident and will be winding down.<\/p>\n

\n
\n
\n

After 7 amazing years building in DeFi, the recent exploit on the Lazy Summer Protocol has forced us into the very difficult decision to wind down https:\/\/t.co\/ccpDrJSnsA<\/a> and sunset the UI.<\/p>\n

We want to thank all our users, the community and supporters \u2013 you made it worthwhile.<\/p>\n

\u2014 Summer.fi \"\u2600\" (@summerfinance_) July 15, 2026<\/a><\/p><\/blockquote>\n<\/div>\n<\/figure>\n

Read more: <\/em>DeFi platform Summer Finance loses $6M in vault exploit<\/em><\/a><\/p>\n

In the first half<\/a> of 2026, the DeFi sector has seen over $900 million lost in 87 incidents, with over 80% of the losses caused by compromised private keys or bridge hacks.<\/p>\n

Of these, two incidents make up the majority, Drift Protocol<\/a> and LayerZero\/KelpDAO<\/a>. Following the latter, the contagion threat led Arbitrum\u2019s Security Council to step in and freeze<\/a> over $70 million of stolen funds.\u00a0<\/p>\n

It remains to be seen whether Ostium\u2019s loss warrants a similar reaction.<\/p>\n

Got a tip? Send us an email securely via\u00a0<\/em>Protos Leaks<\/em><\/a>. For more informed news and investigations, follow us on\u00a0X<\/a>,\u00a0<\/em>Bluesky<\/em><\/a>, and\u00a0<\/em>Google News<\/em><\/a>, or subscribe to our\u00a0<\/em>YouTube<\/em><\/a>\u00a0channel.<\/em><\/p>\n

The post More oracle exploits as Ostium loses over $20M<\/a> appeared first on Protos<\/a>.<\/p>","protected":false},"excerpt":{"rendered":"

Ostium, a decentralized perpetual futures exchange, has been hacked on the Arbitrum network via a suspected private key compromise of its oracle signer. A number of crypto security firms flagged suspicious outflows, with estimates loss estimates ranging from $18 to over $23 million. Ostium\u2019s official X account confirmed an \u201cissue\u201d with its OLP vault shortly […]<\/p>\n","protected":false},"author":1,"featured_media":9230,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"rop_custom_images_group":[],"rop_custom_messages_group":[],"rop_publish_now":"initial","rop_publish_now_accounts":[],"rop_publish_now_history":[],"rop_publish_now_status":"pending","footnotes":""},"categories":[147],"tags":[],"class_list":["post-9229","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-invest"],"_links":{"self":[{"href":"https:\/\/handoli.com\/index.php\/wp-json\/wp\/v2\/posts\/9229","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/handoli.com\/index.php\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/handoli.com\/index.php\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/handoli.com\/index.php\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/handoli.com\/index.php\/wp-json\/wp\/v2\/comments?post=9229"}],"version-history":[{"count":0,"href":"https:\/\/handoli.com\/index.php\/wp-json\/wp\/v2\/posts\/9229\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/handoli.com\/index.php\/wp-json\/wp\/v2\/media\/9230"}],"wp:attachment":[{"href":"https:\/\/handoli.com\/index.php\/wp-json\/wp\/v2\/media?parent=9229"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/handoli.com\/index.php\/wp-json\/wp\/v2\/categories?post=9229"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/handoli.com\/index.php\/wp-json\/wp\/v2\/tags?post=9229"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}