Skip to main content
Sign in

Ostium

avoid.net/ostium→32/100·75% conf.
[AI-DRAFTED · AWAITING VERIFICATION]

Summary

Ostium is an Arbitrum-based decentralized perpetuals exchange, founded by Harvard alumni Kaledora Kiernan-Linn and Marco Antonio Ribeiro, that offers leveraged exposure to real-world assets such as commodities, FX, and indices. On July 15, 2026, the protocol lost an estimated $18-24 million after an attacker compromised an oracle signer's private key and pushed forged, future-dated BTC/USD price reports through a component (PriceUpKeep) that Ostium's own bug bounty program had explicitly excluded from scrutiny. Ostium halted trading within roughly an hour of detection, but as of the most recent reporting the protocol had not published a final loss figure, root-cause postmortem, or reimbursement plan for affected liquidity providers.

Connected Entities

1 entities · 10 linked investigations
Organizations
□Ostium
Relationships
    Also appears in
    edgeX Exchange·28Saga EVM Blockchain·32Mach-O Man Malware Campaign (Lazarus / Chollima)·0Gamma Strategies·28Alephium Bridge·18Bunni Protocol·28BitGrail·2Axiom DEX Insider Trading (Broox Bauer)·14Thorchain DEX·28Crossmint·70
    Have evidence about Ostium?

    Timeline(4 events)

    2025-12-03

    Ostium announces a $20 million Series A co-led by General Catalyst and Jump Crypto, plus a previously undisclosed $4 million strategic round, bringing total funding to approximately $27.8 million.

    CoinDesk

    2026-07-15

    An attacker allegedly compromises an Ostium oracle signer's private key and submits forged, future-dated BTC/USD price reports (as low as $5,000 vs a real price near $60,000) through the PriceUpKeep Forwarder component, extracting an estimated $18-24 million from the OLP vault via looped trades.

    Blockaid / CoinDesk / Halborn

    2026-07-15

    Blockaid detects and publicly discloses the exploit; Ostium halts all trading within roughly one hour, stating trader funds and open positions are frozen and preserved as-is.

    crypto.news / The Defiant

    2026-07-16

    Follow-up coverage highlights that the exploited PriceUpKeep component was explicitly excluded from Ostium's Immunefi bug bounty scope, and that the attacker converted stolen funds to ETH.

    Tech Times / Halborn
    Provenance & Audit Trail

    Decision Log

    • #1publish⛓ pending7/22/2026, 1:47:46 AM
      hash: HxafuoDaiTfKFiQqNb7vSPpm9Bx7xsdhtNvXHqt1Ejqu

    This investigation is cryptographically anchored to the Solana blockchain and source URLs are archived via the Internet Archive.

    full audit log →version history →

    model: claude-code-investigator

    generated: 7/22/2026, 1:45:38 AM

    last updated: 7/22/2026, 1:47:46 AM

    avoid.net — verified advice for a post-truth world