Decentralized trading protocol Ostium paused all trading on Wednesday after blockchain security firms Blockaid and CertiK reported an apparent oracle-related exploit of its OLP liquidity vault. Estimated losses range from $18 million, according to Blockaid, to $22 million, per CertiK. Both firms attributed the incident to a compromise of Ostium's oracle system, which feeds external price data to the protocol.
Incident details and response
Ostium announced on X that it had paused trading after identifying an issue affecting the vault. The team urged users to temporarily revoke approvals for its contracts while the investigation continues. The protocol has not yet confirmed the cause or the loss figures reported by security firms. Built on Arbitrum, Ostium offers leveraged perpetuals trading across 75 pairs including stocks, ETFs, commodities, indices, forex, and cryptocurrencies.
Broader DeFi security concerns
The exploit is the latest in a series of high-profile attacks on decentralized finance protocols this year. According to DeFiLlama, crypto hacks caused nearly $630 million in losses in April, the highest monthly total since February 2025. DeFi protocols accounted for the vast majority, with exploits at KelpDAO and Drift Protocol representing over 80% of April's total.
Security researchers note that recent DeFi attacks increasingly target offchain infrastructure such as oracle systems, privileged access, and key management, rather than smart contract flaws alone. The trend has raised concerns about DeFi's readiness for institutional adoption. In an April research note, JPMorgan analysts highlighted bridge security as a persistent challenge, questioning whether DeFi can scale to support broader institutional participation.
Industry executives have warned that shrinking DeFi yields make security risks harder to justify. Misha Putiatin, CEO of smart contract security firm Statemind and co-founder of Symbiotic, told Cointelegraph in May that institutions struggle to quantify hack risk, making them less willing to accept the sector's returns despite growing interest in blockchain-based finance.