Ostium Trading Platform Hit by $23.75 Million Exploit via Off-Chain Price Manipulation
Ostium, a decentralized trading platform built on the Arbitrum blockchain, suffered a $23.75 million exploit last week after attackers compromised its off-chain infrastructure used for price feeds. The incident, disclosed on July 16, forced the platform to pause trading within 60 minutes of detecting the breach.
The attacker manipulated price reports to open and close large positions artificially, siphoning funds from Ostium’s liquidity provider vault. While trader collateral held in a separate smart contract remained unaffected, existing positions were frozen as the platform halted operations. Ostium confirmed that no user funds were stolen, and authorities were notified.
Blockchain security firm PeckShieldAlert traced the stolen USDC, revealing the attacker swapped it for 12,080 Ethereum (ETH) before depositing 10,540 ETH into TornadoCash, a cryptocurrency mixer, to obscure the funds’ origin.
Ostium, which allows speculation on traditional and crypto assets using USDC for settlements, is now securing its infrastructure and assessing next steps for liquidity providers. Trading remains paused, with the platform promising at least 24 hours’ notice before resuming operations. A detailed post-mortem analysis is expected in the coming days.
Ostium cybersecurity rating report: https://www.rankiteo.com/company/ostium-labs
"id": "OST1784593704",
"linkid": "ostium-labs",
"type": "Cyber Attack",
"date": "7/2026",
"severity": "100",
"impact": "5",
"explanation": "Attack threatening the organization's existence"{'affected_entities': [{'industry': 'Cryptocurrency/FinTech',
'name': 'Ostium',
'type': 'Decentralized trading platform'}],
'attack_vector': 'Off-chain price manipulation',
'customer_advisories': 'No user funds stolen, trading remains paused with '
'24-hour notice before resumption',
'date_detected': '2023-07-16',
'date_publicly_disclosed': '2023-07-16',
'description': 'Ostium, a decentralized trading platform built on the '
'Arbitrum blockchain, suffered a $23.75 million exploit after '
'attackers compromised its off-chain infrastructure used for '
'price feeds. The attacker manipulated price reports to open '
'and close large positions artificially, siphoning funds from '
'Ostium’s liquidity provider vault. Trader collateral held in '
'a separate smart contract remained unaffected, but existing '
'positions were frozen as the platform halted operations.',
'impact': {'downtime': 'Trading paused',
'financial_loss': '$23.75 million',
'operational_impact': 'Trading halted, positions frozen',
'systems_affected': 'Liquidity provider vault, trading operations'},
'investigation_status': 'Ongoing',
'motivation': 'Financial gain',
'post_incident_analysis': {'corrective_actions': 'Securing infrastructure, '
'assessing next steps for '
'liquidity providers',
'root_causes': 'Off-chain price feed manipulation'},
'references': [{'source': 'PeckShieldAlert'}],
'response': {'communication_strategy': 'Public disclosure, promise of 24-hour '
'notice before resuming operations',
'containment_measures': 'Paused trading within 60 minutes, froze '
'existing positions',
'incident_response_plan_activated': 'Yes',
'law_enforcement_notified': 'Yes',
'remediation_measures': 'Securing infrastructure',
'third_party_assistance': 'PeckShieldAlert'},
'stakeholder_advisories': 'Detailed post-mortem analysis expected in the '
'coming days',
'title': 'Ostium Trading Platform Hit by $23.75 Million Exploit via Off-Chain '
'Price Manipulation',
'type': 'Exploit',
'vulnerability_exploited': 'Compromised off-chain infrastructure for price '
'feeds'}