- Ostium has halted trading after an attacker drained approximately $18 million in USDC from its OLP vault on Arbitrum.
- Security researchers say the exploit involved manipulated oracle reports that generated artificial trading profits.
- The stolen funds are already being converted into Ethereum and distributed across multiple wallets.
Onchain perpetuals exchange Ostium has suspended trading after suffering an exploit that drained roughly $18 million in USDC from its OLP vault on the Arbitrum network.
Blockchain security firm Blockaid identified the attack and said the exploiter used a combination of a registered PriceUpKeep forwarder and future-dated authorized oracle reports to generate artificial trading profits before triggering a massive payout from the protocol’s vault.
Following the incident, Ostium confirmed it had paused all trading while its team investigates the exploit.
Oracle Manipulation Led to the Attack
According to Blockaid’s preliminary analysis, the attacker was able to exploit the protocol’s pricing infrastructure rather than directly compromising user wallets.
By leveraging future-dated oracle reports, the attacker allegedly created artificial profits that allowed approximately $18 million in USDC to be withdrawn from the OLP vault.
The exact technical details remain under investigation, but early findings suggest the exploit targeted the protocol’s oracle and trade settlement mechanisms rather than a vulnerability in the Arbitrum blockchain itself.
Stolen Funds Are Already Moving
Blockchain data reviewed by security researchers shows the attacker has already begun laundering portions of the stolen funds.
According to onchain activity, significant amounts of the stolen USDC have been swapped into Ethereum (ETH) through Kyber Network before being distributed across multiple wallets.
Moving assets through decentralized exchanges and splitting funds among multiple addresses is a common tactic used by attackers to make tracing and recovery more difficult.
Ostium Had Recently Expanded Its Business
The exploit comes only weeks after Ostium announced a partnership with Nasdaq to support equity perpetual products using licensed market data.
At the time, the exchange said it had surpassed $50 billion in cumulative trading volume, highlighting its rapid growth within the decentralized derivatives market.
Founded by Harvard alumni Kaledora Kiernan-Linn and Marco Antonio Ribeiro, Ostium has raised approximately $27.8 million in funding. Its investors include General Catalyst, Jump Crypto, LocalGlobe, Susquehanna, and Alliance DAO.
DeFi Security Remains a Major Challenge
The latest exploit serves as another reminder that decentralized finance protocols remain attractive targets for sophisticated attackers, particularly those exploiting oracle systems and smart contract logic.
While Ostium investigates the incident and works toward a resolution, traders will be watching closely for further updates regarding the stolen funds, any potential recovery efforts, and whether affected users or liquidity providers will be compensated.
