Decentralized perpetual assets trading platform Doorfocused on real world entities Decision The network suffered a significant security incident that resulted in a loss of approximately $18 million from its liquidity vault. The attack, which occurred on July 15, 2026, caused all activities to be stopped immediately. trade Activities within the scope of the protocol.
Security monitoring company Blockaid was among the first to detect the breach, noting that the perpetrator took advantage of a registered PriceUpKeep forwarder within Ostium’s automated rate. infrastructure.
The attacker uses artificial data by sending authoritative but dated prophecy reports. trade profit.
This enabled a series of cyclical on-off position actions that pulled funds directly from the market. US Dollar Liquidity vault that serves as the counterparty to user transactions.
A Security Update: Trading remains paused following the security incident. In frozen trading smart contracts, user positions remain open and unchangeable and the investor margin remains unchanged. The team will continue to provide updates regarding a timeline as they become available…
— Ostium (@Ostium) July 16, 2026
on chain analysis 50 percent of the primary exploit transaction confirms significant USDC outflows, representing a significant fraction of the value of the vault at the time.
Ostium’s team acted quickly to contain the damage.
In an official security update, the protocol confirmed that trading had been paused.
Trader margins are securely frozen, leaving user positions open and unchangeable. smart contracts.
The protocol emphasized that no user funds other than the affected vault mechanics were directly impacted in a way that would alter these protections.
The project triggered a widespread response.
Teams work around the clock in coordination with law enforcement, expert security investigators and firms such as SEAL 911 to track stolen funds and support the ongoing investigation.
Multiple parties are actively monitoring asset movements to assist in potential recovery efforts.
Ostium positions itself as a gateway for on-chain trading of global markets. stockscommodities, forex and crypto permanent assets with significant leverage.
It had received significant institutional support before the incident, raising approximately $28 million from investors including General Catalyst and Jump Crypto.
The platform has also reached impressive transaction volumes of over $50 billion cumulatively, underlining its role in bridging traditional finance and DeFi.
This use It adds new ones to the oracle and automation-related vulnerabilities seen in DeFi recently.
Such events often leverage timing mechanisms or privileged components in price streams that are critical for accurate payout in continuous trading.
Despite prior controls and robust design, the breach exposes persistent risks to key management and carrier contracts used for real-time data integration.
The liquidity vault, where providers deposit USDC to facilitate trading, bore the brunt of this loss.
While full recovery details are still emerging, the funded status of the protocol could provide resources to explore compensation options for affected parties.
Users are directed to monitor official communications for further timelines regarding contract resumption and fund recovery developments.
wider DeFi The community continues to emphasize the importance of strengthened security practices, especially around oracle dependencies and privileged roles.
Like RWA permanent platforms are gaining traction, events like this hard As critical lessons for increasing resilience to advanced manipulation tactics. Ostium expressed gratitude for the community and expert support while committing to transparent updates as more information becomes available.
