On July 15, 2026, Ostium perpetuals DEX on Arbitrum suffered a $23.75M exploit when an attacker used a compromised price oracle private key to sign fraudulent Bitcoin price reports ($5,000 vs. real ~$60,000), opening positions at fake prices and closing at market rates.

Ostium, an RWA-focused perpetuals DEX on Arbitrum, suffered an oracle manipulation exploit. The attacker used a compromised oracle signer key to submit fraudulent future-dated price reports, generating artificial trading profits and draining approximately $18 million USDC from the liquidity vault. The protocol has halted trading and is investigating.