Digital Asset
Intelligence
Security Incident · Arbitrum Ecosystem

Ostium Private Key Leak: $18.00M Reported Loss

·Historical incident record

Incident Overview

Ostium, an RWA-focused perpetuals DEX on Arbitrum, suffered an oracle manipulation exploit. The attacker used a compromised oracle signer key to submit fraudulent future-dated price reports, generating artificial trading profits and draining approximately $18 million USDC from the liquidity vault. The protocol has halted trading and is investigating.

Sources & References

Original incident referencehttps://x.com/kaledora/status/2077525044733837736 (opens in a new tab)

This record presents information attributed to the linked sources. Incident dates describe the original event, not a new report. Reported loss figures reflect the source record and are not current market valuations.

More Security Incidents

View All →
  1. Incident date
    Target

    Cascade

    Attack methodPrice Manipulation
    Reported loss$ 1,343,921
  2. Incident date
    Attack methodSmart Contract Logic Vulnerability
    Reported loss$ 270,000
  3. Incident date
    Attack methodSignature Replay Attack
    Reported loss$ 29,984.27
  4. Incident date
    Attack methodSmart Contract Vulnerability
    Reported loss$ 13,700
  5. Incident date
    Target

    TeleSwap

    Attack methodUnknown
    Reported loss$ 735,000