POPA Recon#Ostium #DeFi #Security #Arbitrum #Oracle 🚨
#Ostium #DeFi #Security #Arbitrum #Oracle 🚨 ☠️ Ostium loses up to $18M: the oracle signing key was the attack surface The attacker never touched the contract logic. They held a compromised oracle key - and the protocol executed exactly as designed, just on fabricated prices. ❌ On July 15, Ostium (perp DEX on Arbitrum, RWA pairs - gold, forex, indices up to 200x) lost between $11.9M and $18M USDC - roughly 28% of its $63M TVL. The attacker held the private key of the PriceUpKeep forwarder (Gelato automation), submitted oracle reports with future timestamps, and cyclically opened and closed…
The excerpt is quoted from a public Telegram channel, which owns its text.