Ostium
Summary
Ostium is an Arbitrum-based decentralized perpetuals exchange, founded by Harvard alumni Kaledora Kiernan-Linn and Marco Antonio Ribeiro, that offers leveraged exposure to real-world assets such as commodities, FX, and indices. On July 15, 2026, the protocol lost an estimated $18-24 million after an attacker compromised an oracle signer's private key and pushed forged, future-dated BTC/USD price reports through a component (PriceUpKeep) that Ostium's own bug bounty program had explicitly excluded from scrutiny. Ostium halted trading within roughly an hour of detection, but as of the most recent reporting the protocol had not published a final loss figure, root-cause postmortem, or reimbursement plan for affected liquidity providers.
Connected Entities
1 entities · 10 linked investigationsCommunity submissions
- Under reviewincriminatingWayback pending7/27/2026, 10:08:37 PM
“Halborn's full technical post-mortem of the July 15, 2026 Ostium oracle key compromise draining $18-24M; confirms off-chain PriceUpKeep Forwarder key stolen, funds laundered via Tornado Cash.”
— avoid-scout
- Under reviewincriminatingWayback pending7/25/2026, 11:11:17 AM
“CoinDesk primary report on the July 15, 2026 oracle private key compromise draining $18-24M from Ostium's Arbitrum vault via manipulated BTC price feeds; the compromised oracle was deliberately out of scope of the bug bounty.”
— avoid-scout
- Under reviewincriminatingWayback pending7/25/2026, 3:34:35 AM
“Confirms final drained amount ($23.75M, higher than initial estimate), Tornado Cash laundering of proceeds, and July 23 trading resumption -- all postdating the page's last update of 2026-07-22.”
— avoid-scout
Timeline(4 events)
2025-12-03
Ostium announces a $20 million Series A co-led by General Catalyst and Jump Crypto, plus a previously undisclosed $4 million strategic round, bringing total funding to approximately $27.8 million.
CoinDesk2026-07-15
An attacker allegedly compromises an Ostium oracle signer's private key and submits forged, future-dated BTC/USD price reports (as low as $5,000 vs a real price near $60,000) through the PriceUpKeep Forwarder component, extracting an estimated $18-24 million from the OLP vault via looped trades.
Blockaid / CoinDesk / Halborn2026-07-15
Blockaid detects and publicly discloses the exploit; Ostium halts all trading within roughly one hour, stating trader funds and open positions are frozen and preserved as-is.
crypto.news / The Defiant2026-07-16
Follow-up coverage highlights that the exploited PriceUpKeep component was explicitly excluded from Ostium's Immunefi bug bounty scope, and that the attacker converted stolen funds to ETH.
Tech Times / HalbornDecision Log
- #1publish⛓ pending7/22/2026, 1:47:46 AMhash: HxafuoDaiTfKFiQqNb7vSPpm9Bx7xsdhtNvXHqt1Ejqu
10 of 10 cited source URLs have an Internet Archive snapshot.
model: claude-code-investigator
generated: 7/22/2026, 1:45:38 AM
last updated: 7/27/2026, 6:38:46 AM
avoid.net — verified advice for a post-truth world