Ostium Hack Highlights Off-Chain Weakness in Decentralized Finance

Ostium, a decentralized tokenized asset perpetual futures trading platform built on Arbitrum, has suffered a massive hack resulting in the loss of $23.75 million.

The attack did not target the protocol's smart contracts or multisignature wallet, but rather its off-chain infrastructure, specifically the OLP vault that holds liquidity provider funds.

Security experts point out that this incident highlights a growing concern in decentralized finance: while on-chain security has improved significantly, off-chain infrastructure often remains a weaker link. Many DeFi platforms rely on centralized or semi-centralized backend services for functions like price feeds, order matching, and user interface management.

Ostium has paused trading and withdrawals while it works with security firms and law enforcement to trace the stolen assets. The platform assures its community that the protocol's core smart contracts and multisig governance mechanisms remained secure and were not part of the attack vector.