
Ostium relaunches trading stack with Gateway after $23.75M oracle exploit
- —An attacker drained $23.75 million in USDC from Ostium's OLP vault in July 2026 using fake BTC price reports
- —The theft unfolded across eight transactions, with the largest single transfer moving $11.9 million
- —Ostium said its smart contracts and multisig wallets were not compromised, blaming off-chain access
- —More than 90% of affected liquidity providers will be fully reimbursed under a recovery plan
Why it matters: The case underscores that oracle keys and off-chain credentials, not contract code, remain the biggest source of losses in DeFi.
Source: Coinpaprika News