$23.75M Ostium Hack Exposes Off-Chain Weaknesses in DeFi

Ostium, a decentralized tokenized asset perpetual futures trading platform built on Arbitrum, has confirmed that a $23.75 million hack earlier this week resulted from an exploit targeting its off-chain infrastructure.

The platform stated that funds held in the OLP vault were stolen, while its smart contracts and multisignature wallet remained uncompromised.

Ostium's post-mortem explained that the attack did not stem from vulnerabilities in the protocol’s on-chain code, which many DeFi users initially feared. Instead, the breach exploited weaknesses in the platform’s off-chain systems, the backend infrastructure that handles data processing, order management, and other non-blockchain operations.

The OLP vault, which holds liquidity provider funds, was directly targeted and drained.