Hackers Steal $23.7M in Crypto From Ostium

The Ostium trading platform reported that hackers stole $23.75 million from its liquidity provider vault last week. The attack exploited vulnerabilities in the off-chain infrastructure that supplied price data to the protocol. This breach allowed the attackers to manipulate the protocol's state by feeding it incorrect price information, leading to the theft of funds.

Ostium stated in a post on X (formerly Twitter) that the compromise occurred on June 13, 2024. The attackers gained unauthorized access to the off-chain price feeder, which is a critical component for the decentralized finance (DeFi) protocol. By controlling this data feed, the malicious actors were able to execute trades at artificially advantageous prices, draining the liquidity pool.

The platform has since paused all trading activities and is working with security experts to investigate the incident. Ostium has also initiated a process to reimburse affected users, though the exact timeline and method for compensation have not yet been detailed. The company has not disclosed the specific methods used by the hackers to gain access to the off-chain infrastructure, nor have they identified the perpetrators.

This incident highlights the ongoing security challenges within the DeFi space, particularly concerning the integrity of off-chain data feeds. The theft from Ostium underscores the importance of robust security measures for all components of a decentralized trading system, not just the on-chain smart contracts. The company is expected to provide further updates as its investigation progresses and recovery efforts are underway.