‼️ Perpetual DEX Ostium has paused trading after suffering an estimated $18–22M USDC exploit.
The attacker reportedly compromised part of the oracle system and submitted future-dated price updates, making losing positions appear profitable before repeatedly draining liquidity. Perhaps the biggest takeaway: the compromised component had previously been considered "trusted" and wasn't included in Ostium's bug bounty scope.
🛡 It's another reminder that in DeFi, security isn't just about smart contracts. Oracles, infrastructure, and system design are just as critical. As the ecosystem grows, protecting every layer, not just the blockchain itself - will be essential for building truly resilient DeFi.