Ostium Protocol Suffers $23.75 Million USDC Loss from Attack
The Ostium liquidity provider fund was attacked on July 15, resulting in a loss of 23,752,746 USDC.
The attacker compromised off-chain price data infrastructure, submitted forged illegal price reports, and manipulated large positions to extract profits.
Trader collateral was independently isolated and remained unaffected. The team paused trading and froze contracts within 60 minutes, and is currently collaborating with multiple parties, including Mandiant, to investigate and strengthen infrastructure.
Ostium promises to notify users 24 hours in advance before any unfreezing, with positions marked to new prices upon recovery, prioritizing liquidity providers and secure recovery.
This incident exposes oracle risks in DeFi, putting pressure on liquidity providers, while security audits and off-chain infrastructure service providers benefit from increased demand, with capital temporarily flowing to more mature risk control projects.
Source: Public Information
ABAB AI Insight
Ostium, previously a derivatives protocol, continues the history of DeFi oracle manipulation (such as multiple flash loan + oracle attacks). The team's quick suspension reflects a mature emergency mechanism, similar to past protocols collaborating with security firms after being attacked.
In terms of capital flow, the lost funds were directed to the attacker through manipulated positions, while protocol resources shifted towards investigation and repair, motivated by the need to restore trust and strengthen off-chain infrastructure, strategically isolating user funds to reduce systemic risk.
Similar cases include multiple DeFi oracle attacks, with current derivatives protocols undergoing security upgrades and transformations.
This fundamentally represents a shift towards technological alternatives and capital concentration: the vulnerabilities of off-chain oracles are exposed, driving capital towards decentralized oracles and multi-source verification, enhancing the pricing power of security service providers, while forcing protocols to evolve towards stronger isolation and auditing mechanisms.
ABAB News · Cognitive Laws
Off-chain oracles are the biggest single point of failure in DeFi
60-minute pause saved users, but losses remain severe
Strengthening after an attack is the way to survive