Ostium loses $18 million in oracle attack that gamed its own price-feed infrastructure

A hacker used Ostium's own price-reporting infrastructure against the protocol, submitting falsified future-dated oracle data to manufacture fake trading profits and trigger an $18 million payout.

Ostium loses $18 million in oracle attack that gamed its own price-feed infrastructure

Finance

Ostium suffers $18 million exploit as oracle attack wave continues to hit DeFi

A hacker used Ostium's own price-reporting infrastructure against the protocol, submitting falsified future-dated oracle data to manufacture fake trading profits and trigger an $18 million payout.

By

Oliver Knight

|

Edited by

Cheyenne Ligon

Jul 15, 2026, 3:27 p.m.

2

min read

Make

preferred on

Share

Share this article

Copy link

X icon

X (Twitter)

LinkedIn

Facebook

Email

Make

preferred on

Hacker (Pixabay)

Summary

Show

An attacker exploited a registered component of Ostium's price-feed automation system, submitting oracle reports with manipulated future timestamps to make losing trades appear profitable — triggering an $18 million USDC payout from the protocol's vault.

The attack follows a string of similar keeper and oracle exploits in DeFi, including a $6 million drain from Summer.fi last week, highlighting persistent vulnerabilities in the automated infrastructure protocols rely on to bring real-world price data onchain.

Ostium, a perpetuals exchange on Arbitrum focused on real-world assets like gold, forex, and equity indices, had raised $27.8 million in funding and processed over $50 billion in trading volume before the incident.

An attacker drained approximately $18 million in USDC from Ostium's liquidity vault on Arbitrum in an oracle manipulation exploit detected by

blockchain security firm Blockaid

, onchain

data shows

.

According to Blockaid's alert, the attacker leveraged a registered PriceUpKeep forwarder, a component of Ostium's automated infrastructure, to submit oracle price reports with future-dated timestamps. The manipulated reports created the appearance of profitable trades, which triggered an $18 million USDC payout from the vault.

Ostium is a decentralized perpetuals exchange on Arbitrum that allows users to trade real-world assets including commodities, forex, and equity indices, with up to 200x leverage, settling in USDC.

Ostium uses a custom price-feed system to track real-world asset prices, with a third-party automation network called Gelato responsible for pushing those prices onchain at the right moments. A smart contract called PriceUpKeep sits at the center of that process, acting as the trigger that writes the latest price data to the blockchain whenever a trade needs to be executed.

The attack is consistent with a pattern of oracle and keeper-system exploits seen across DeFi in recent years, the most recent of which saw $6 million drained from Summer.fi last week. The exploit involves attackers gaining access to privileged roles and manipulate the timing or content of price data to extract funds from liquidity pools.

Ostium had raised $27.8 million in total funding, including a $24 million Series A co-led by General Catalyst and Jump Crypto in late 2025, and had processed over $50 billion in cumulative trading volume.

Hack

Latest Crypto News

1

DTCC moves tokenized securities into live trading, marking a milestone for Wall Street's blockchain push

2 hours ago

2

Cantor and Securitize collaborate on blockchain-based IPOs

2 hours ago

3

The privacy paradox of protecting kids online

4 hours ago

4

President Trump expected to meet with senators to work on ethics concerns in crypto bill

5 hours ago

5

South Korea to modify 76-year-old law to classify cryptocurrencies as national assets

5 hours ago

6

Open USD poses biggest threat yet to Circle's USDC, CoinShares says

5 hours ago

7

A timeline of the Ethereum Foundation's ongoing shakeup

6 hours ago

8

BlackRock's crypto assets fall 39% despite $15 billion of net inflows

7 hours ago

9

The launchpad that fueled Robinhood Chain's memecoin boom just gave away all its revenue

7 hours ago

10

Japan reclassifies crypto as a financial asset, paves way for tax cuts

7 hours ago

Latest Research

Gate Leads Spot Market Share Gains as CEX Volumes Rise for First Time in Five Months

Gate Leads Spot Market Share Gains as CEX Volumes Rise for First Time in Five Months

CEX trading volumes rose for the first time in five months in June, with spot climbing 15.3% to $1.11T and RWA perpetual volumes surging to a record $311B.

By

CoinDesk Research

Jul 13, 2026

CEX trading volumes rose for the first time in five months in June, with spot climbing 15.3% to $1.11T and RWA perpetual volumes surging to a record $311B.

Why it matters

:

CEX trading volumes rose for the first time in five months in June, with spot climbing 15.3% to $1.11T and RWA perpetual volumes surging to a record $311B.

View Full Report

More From

Finance

DTCC moves tokenized securities into live trading, marking a milestone for Wall Street's blockchain push

Cantor and Securitize collaborate on blockchain-based IPOs

Open USD poses biggest threat yet to Circle's USDC, CoinShares says

Crypto

CD20

$1,776.62

CD20 up 0.53 percent

0.53%

BTC

$64,908.92

BTC up 0.58 percent

0.58%

ETH

$1,924.80

ETH up 2.64 percent

2.64%

XRP

$1.11

XRP down 0.24 percent

0.24%

SOL

$77.25

SOL up 0.18 percent

0.18%