POPA ReconOstium Exploited for $23.3M - Oracle Key Compromise Drains the LP Vault
Ostium Exploited for $23.3M - Oracle Key Compromise Drains the LP Vault Ostium, the RWA perp DEX on Arbitrum, was drained today - initial estimates of ~$18M have grown to $23.3M, over a third of its $63M TVL, with all stolen funds already swapped into 12,085 ETH. The attacker compromised an oracle signing key, then used a registered PriceUpKeep forwarder to submit future-dated but validly signed price reports. With tomorrow's prices in hand, they looped ~20 open-close cycles through delegated actions, printing artificial profit on every turn until the vault paid out Ostium's own bug bount…
The excerpt is quoted from a public Telegram channel, which owns its text.
Read the original post on Telegram
More posts from Top 7 | Tech, AI & Crypto Analytics · All channels