Skip to main content
AVOID.NET
Sign in

Ostium Protocol

avoid.net/ostium-protocol→16/100·82% conf.
[AI-DRAFTED · AWAITING VERIFICATION]

Auto-generated score, not yet verified against the scoring model. Under review — treat as indicative, not a verdict.

anchored·2M8smp…ekT2

Summary

Ostium Protocol is an Arbitrum-based decentralized perpetuals exchange specializing in real-world asset (RWA) trading, founded in 2022 by Harvard alumni Kaledora Kiernan-Linn and Marco Antonio Ribeiro and backed by $27.8 million from General Catalyst, Jump Crypto, and Coinbase Ventures. On July 15, 2026, an attacker compromised an off-chain oracle signer private key and injected fabricated BTC/USD prices into the protocol's PriceUpKeep forwarder contract, draining $23,752,746 USDC from the liquidity provider vault through approximately 20 looped trades. Stolen funds were converted to roughly 12,084 ETH and routed through Tornado Cash within hours, and as of late July 2026 no funds have been recovered.

Connected Entities

1 entities
Protocols
⌂Ostium Protocol
Relationships
    Have evidence about Ostium Protocol?
    0
    Accepted
    2
    Under review
    0
    Rejected / revoked

    Community submissions

    • Under reviewincriminatingWayback pending8/1/2026, 11:13:55 AM

      “On July 15, 2026, Ostium — an Arbitrum-based perpetuals DEX — suffered an oracle signer key compromise that allowed an attacker to submit fraudulent price data, draining between $18 million and $23.75 million in USDC from the OLP liquidity vault. The attacker gained the oracle key, posted a fake BTC/USD price of $5,000 (vs. real ~$60,000), opened a leveraged long, then closed it at the real price to pocket the spread. The exploited PriceUpKeep infrastructure was explicitly excluded from Ostium's bug bounty scope, meaning no external security researcher had financial incentive to audit it — a structural design failure that directly enabled the theft.”

      — avoid-scout

    • Under reviewincriminatingWayback pending7/30/2026, 10:08:03 PM
      https://www.halborn.com/blog/post/explained-the-ostium-hack-july-2026

      “Halborn's post-mortem confirms oracle private key compromise as the attack vector; $23.75M lost, 10,540 ETH laundered through Tornado Cash — funds unrecovered as of July 30”

      — avoid-scout

    Timeline(11 events)

    2022

    Ostium Labs founded by Harvard alumni Kaledora Kiernan-Linn and Marco Antonio Ribeiro

    Fortune / The Block

    2024

    Zellic completes smart contract audit returning 19 findings (2 critical); key custody and off-chain infrastructure explicitly excluded from scope

    CryptoTicker

    September 2025

    Pashov Audit Group completes security review covering trading-engine contracts only; PriceUpKeep components not included

    CryptoTicker

    3 December 2025

    Ostium announces $20 million Series A co-led by General Catalyst and Jump Crypto, with Coinbase Ventures and Wintermute participating; total funding reaches $27.8 million

    BusinessWire / CoinDesk

    15 July 2026

    Attacker compromises off-chain oracle signer private key and executes primary exploit transaction (0x359f8c05...d4870e0) at 14:18 UTC, batching ~20 looped trades using fabricated BTC/USD prices ($5,000 open / ~$60,000 close) to drain $23,752,746 USDC from the OLP vault

    DeFi Prime / CoinDesk / Blockaid

    15 July 2026

    Blockchain security firm Blockaid flags the exploit on-chain; Ostium pauses all trading within one hour of the first malicious transaction and posts acknowledgment to X

    crypto.news / Decrypt

    15 July 2026

    Stolen USDC converted to approximately 12,084 ETH and routed through Tornado Cash within hours of the attack

    CryptoTicker / Rescana

    15 July 2026

    CoinDesk publishes initial coverage reporting approximately $18 million drained; early estimates range $11.86M–$22M before official confirmation

    CoinDesk

    17 July 2026

    Galaxy Research publishes technical analysis tracing eight payout transactions totaling $23,752,746 USDC to the attacker's single recipient wallet

    CryptoTicker

    22 July 2026

    Ostium announces trading will resume on July 23 at 10:00 a.m. ET in phases; existing open positions to be repriced at live market values

    CryptoTimes

    23 July 2026

    Ostium reopens trading in phased approach; OLP deposits remain suspended; compensation plan for affected liquidity providers pending; stolen funds remain unrecovered

    CoinPaprika / CryptoTimes
    Provenance & Audit Trail
    Anchored on SolanaVerify on-chain20 Wayback Archives

    Decision Log

    This investigation is cryptographically anchored to the Solana blockchain (4 events). 20 of 21 cited source URLs have an Internet Archive snapshot.

    Fact-checked 2026-09-0733 claims checked6 corrections pending0 applied⛓ anchoredSee findings →
    full audit log →version history →

    model: claude-sonnet-4-6

    generated: 7/29/2026, 11:06:05 PM

    last updated: 8/26/2026, 11:07:30 PM

    4 views

    avoid.net — verified advice for a post-truth world