Ostium Confirms July 15 Exploit Draining $23.7 Million in USDC Was Off-Chain Hack
DeFi protocol Ostium said a July 15 exploit that drained $23.7 million in USDC from its OLP liquidity vault resulted from a compromised off-chain infrastructure system. The attacker fabricated bitcoin prices to extract funds, while the protocol’s smart contracts and multisignature wallets remained secure.
The detailed post-mortem was published after initial market reports sparked confusion regarding the breach’s origin. The confirmation rules out a smart contract vulnerability and clarifies that the technical failure occurred entirely in the system layers monitoring the vault.
From the sources (6 posts)
@laurashinOffchain CEO Steven Goldfeder on how they stemmed the bleeding on bridge risk across Arbitrum "The first thing we did was harden the native bridge and invest a lot there, but also educate folks on how to use it correctly. This is probably
@unchained_podWhy Steven Goldfeder wasn't sweating the "Arbitrum bridge" scare: The rollup's native bridge, he says, is built so you "don't have to rely on… active signers and multisig" the way third-party bridges do. The hacked one was someone else's.
@laurashin"Arbitrum bridge hacked" trended this week. It wasn't. Steven Goldfeder says Offchain Labs confirmed the native bridge was never touched and traced the drain to a third-party perp DEX's own bridge. They moved to "cut the narrative pretty
@theblockcoTHE BLOCK: Ostium said in a new post-mortem that its July 15 exploit, which drained 23.75 million USDC from its OLP vault, stemmed from a compromise of its off-chain infrastructure. Its smart contracts or protocol multisigs were not affecte
@ifivelabsOstium says its $23.7M exploit was not a smart contract hack. The attacker compromised off-chain infrastructure, manipulated BTC prices, and extracted profits from the liquidity vault.
@blckchaindaily🚨 OSTIUM SAYS $23.7M EXPLOIT WAS OFF-CHAIN INFRASTRUCTURE COMPROMISE, ATTACKER FABRICATED $BTC PRICES TO DRAIN LIQUIDITY VAULT