What happened
On July 15, 2026, Ostium said its LP vault lost 23,752,746 USDC after compromised off-chain price-reporting infrastructure fed manipulated reports into the protocol.
Technical root cause
Ostium attributed the incident to compromised off-chain price-reporting infrastructure. The project had not publicly identified the precise compromised component or bypass path.
How it happened
Manipulated price reports were accepted, allowing the attacker to open and immediately close large positions for artificial profit against the LP vault. Ostium said trader collateral was unaffected and later reopened trading in guarded stages.
Protocol details
Classification
Other / Key Compromise
Protocol Type
Derivatives
Implementation language
Solidity
Protocol links
Website
@OstiumLabs
Security review history
- Pashov Audit Group View report
- Zellic View report
Evidence
- report @Ostium incident report x.com
- report @coinminutes_en incident report x.com
- report Post-mortem rekt.news
- report Ostium incident update x.com
- report Ostium guarded relaunch update x.com
- analysis DeFiLlama defillama.com
Understand the attack patterns
Build your security review skills
Work through hands-on labs covering real exploit mechanics, review techniques, and defensive patterns.
