Arbitrum RWA Perp DEX Ostium Drained for $18M in Oracle Exploit
Arbitrum's RWA perp DEX, Ostium, just got hit for $18M USDC. A compromised oracle key allowed attackers to manipulate prices and drain over a third of its TVL. This isn't just a hack; it's a stark warning for the rapidly expanding RWA sector.
Arbitrum's RWA perp DEX, Ostium, just got gutted for nearly $18 million USDC. Attackers compromised an oracle signer private key, allowing them to feed manipulated prices and bypass verification checks. This wasn't a slow bleed; it was a surgical strike.
The exploit saw roughly 20 looped trades executed through delegated actions. Attackers instantly pocketed profits at the protocol's expense, all without genuine market exposure. Pure signal, pure theft.
This $18M hit represents a staggering 32-35% of Ostium's $34M TVL. The platform, backed by heavyweights like Jump Crypto and Coinbase Ventures, raised $27.8M. Institutional backing didn't stop this collapse.
The incident screams a critical warning for the booming RWA perpetuals sector: oracle-dependent infrastructure remains a prime target. Hardened key management and real-time monitoring aren't optional; they're survival. Expect increased scrutiny on similar platforms.