TechFlow reports, on July 19, Ostium released an incident update stating that on July 15, its liquidity provider (LP) vault was attacked, resulting in a loss of 23,752,746 USDC. Preliminary investigations show that the attacker infiltrated off-chain infrastructure related to the protocol's price inputs, and submitted forged but superficially valid price reports, extracting abnormal profits from the vault by quickly opening and closing large positions.
Ostium stated that trader margins are stored in independent isolated contracts and were not affected by this incident, with existing positions remaining open. The project team stated that they have launched an investigation in collaboration with Mandiant, zeroShadow, Collisionless, SEAL 911, and law enforcement agencies, and suspended trading and froze all trading contracts within 60 minutes after the first attack transaction occurred. Ostium also stated that they will provide at least 24 hours notice before resuming trading, and after reopening, trader positions will be valued at the price at the time of restart.
