Ostium DEX Loses $18 Million in Oracle Attack, Trading Halted

Ostium, a decentralized finance (DeFi) protocol, lost approximately $18 million in USDC after an oracle attack on July 15, 2026. The attackers compromised an oracle signer key and manipulated the price feed to generate fraudulent trading profits. This exploit drained nearly one-third of Ostium's total value locked, which was $63 million at the time. The security firm Blockaid confirmed the breach, revealing that the attacker used a registered PriceUpKeep forwarder and future-dated authorized oracle reports. In response, Ostium has paused all trading activities and is investigating the incident to prevent future occurrences. This incident is part of a troubling trend in the DeFi space, where over $840 million has been stolen from protocols in the first five months of 2026. Security experts warn that advances in AI are accelerating the discovery of vulnerabilities, making such attacks more feasible.

Key Points: • Ostium lost $18 million due to an oracle manipulation attack on July 15, 2026. • The exploit involved using a PriceUpKeep forwarder and future-dated oracle reports. • Ostium has paused trading and is investigating the breach to enhance security.