Ostium, a decentralized perpetual exchange built on Arbitrum, lost approximately $18 million in USDC on Wednesday after attackers compromised an oracle signer key to manipulate price feeds. The exploit, detected by blockchain security firm Blockaid, drained nearly one-third of the protocol's $63 million in total value locked.
How the Attack Worked
According to Blockaid, the attacker used a registered PriceUpKeep forwarder and submitted future-dated authorized oracle reports to generate artificial trading profits. This triggered a payout from Ostium's liquidity vault in the form of Circle-issued USDC stablecoin. Ostium confirmed the incident on X, stating that trading had been paused while the team investigated.
Ostium offers perpetual futures tied to real-world assets such as stocks, commodities, forex, and indices. As a decentralized exchange, users retain control of their funds without providing personal information. The exploit highlights persistent vulnerabilities in oracle-dependent DeFi protocols.
Broader DeFi Security Context
The attack adds to a grim year for DeFi security. Over $840 million was stolen from DeFi protocols in the first five months of 2026 alone, including $292 million from KelpDAO and $285 million from Drift Protocol. In June, Resolv Labs lost over $25 million to hackers.
Security experts warn that artificial intelligence is accelerating exploit discovery. Danny Jenkins, CEO of ThreatLocker, noted that AI systems are already finding vulnerabilities faster than humans, and newer models like Mythos could expand those capabilities. In May, researcher Taylor Hornby used Anthropic's Claude Opus 4.8 to uncover a four-year-old counterfeiting bug in Zcash, demonstrating the growing power of frontier AI to identify complex software flaws.