6.9 Security Ostium 基于 Arbitrum 的 DEX 遭预言机攻击，USDC 损失 1800 万美元，交易已暂停并调查中。
Ostium 是一个专注于现实世界资产、基于 Arbitrum 的去中心化永续合约交易所，近日遭遇重大攻击，导致其流动性金库损失高达 1800 万美元 USDC。攻击者利用已注册的 PriceUpKeep forwarder，并提交带有未来日期的授权预言机报告，攻破了预言机基础设施，从而操纵价格并制造虚假交易利润。 通过反复开仓和平仓，攻击者无需承担真实市场风险便将金库资金抽走。安全公司 Blockaid 首先发现该漏洞，链上数据显示攻击者已将盗取的 USDC 兑换为以太坊，并分散至多个钱包。 Ostium 已暂停所有交易并展开调查。本次事件占协议总锁仓价值的显著比例，凸显 DeFi 预言机和 keeper 系统的脆弱性。值得注意的是，Ostium 在此次攻击前刚完成大额融资，并处理了数十亿美元的交易量。
Summer.fi Confirms Shutdown Following Major USDC Vault Exploit
Blockaid uncovers $18M exploit that forces Ostium trading halt
Ostium Hit by $18M Exploit After Hacker Manipulates Future‐Dated Oracle Data
Attack on Ostium drains US$ 18 million and suspends trading
Massive Heist Hits Decentralized Exchange Ostium
Ostium Pauses Trading After Apparent $22 Million Vault...
Ostium suffers $18 million USDC exploit, losing one-third of DEX liquidity
Ostium pauses trading as security firms report multimillion-dollar oracle exploit
Ostium Loses $18M in Oracle Exploit as DeFi Attack Wave Continues
Blockaid Flags Suspected $18M Exploit Targeting Ostium
Ostium Oracle Exploit Drains Up to $22M, Forces Trading Halt
More oracle exploits as Ostium loses over $20M
Ostium suspends trading after OLP vault exploit drains up to $23.7M in USDC
Ostium RWA perpetual DEX suffers $18M exploit
Cyber Heist Hits DeFi Platform: A $18 Million Blow
Ostium exploited in $18 million oracle attack using protocol’s own infrastructure
Ostium halts trading after $18M exploit via oracle manipulation
Another DeFi Exploit: Perp DEX Ostium Loses $18 Million in Oracle Attack
Ostium Pauses Trading After Alleged $18M Arbitrum Vault Exploit
Ostium Halts Trading After Oracle Exploit Drains up to $18M from Vault
Arbitrum-based DEX Ostium targeted in $18 million vault exploit: Report
Ostium Vault Loses Up to $18M in Oracle Price Exploit
Ostium pauses trading after apparent $18 million vault exploit
Ostium suffers $18 million exploit as oracle attack wave continues to hit DeFi
Ostium Perp DEX Hit for $18 Million in Brutal Oracle Exploit
