Ostium Exploit Tied to Unauthorized Off-Chain Access

Ostium, a decentralized trading platform, has released new details about the July 15 exploit that drained 23.75 million USDC from its public OLP vault.

The attack was not caused by any flaw in Ostium's smart contracts or multisigs, but rather by an unauthorized breach of off-chain infrastructure.

The attacker used this access to push fraudulent BTC-USD price reports into the protocol, generating artificial trading profits from the OLP vault.

The team behind Ostium emphasized that its investigation found no evidence of issues in the protocol's smart-contract logic or governance multisigs.