--- title: Hackers steal $23.7 million in crypto from Ostium in... description: The Ostium decentralized trading platform lost $23.75 million after attackers compromised its off-chain price feed infrastructure. By submitting fraudulent... canonical: https://daily.dev/posts/hackers-steal-23-7-million-in-crypto-from-ostium-in-off-chain-attack-rfqz8umha twitter:card: summary_large_image twitter:site: @dailydotdev og:type: website og:site_name: daily.dev og:title: Hackers steal $23.7 million in crypto from Ostium in off-chain attack | daily.dev og:description: The Ostium decentralized trading platform lost $23.75 million after attackers compromised its off-chain price feed infrastructure. By submitting fraudulent... og:url: https://daily.dev/posts/hackers-steal-23-7-million-in-crypto-from-ostium-in-off-chain-attack-rfqz8umha og:image: https://api.daily.dev/og/posts/rFqZ8uMHA.png og:image:alt: Hackers steal $23.7 million in crypto from Ostium in off-chain attack og:image:width: 1200 og:image:height: 630 og:locale: en --- > ## Documentation Index > Fetch the complete documentation index at: https://daily.dev/llms.txt > Use this file to discover all available pages before exploring further. # Hackers steal $23.7 million in crypto from Ostium in off-chain attack **[BleepingComputer](https://daily.dev/sources/bleepingcomputer)** · 3 min read · 2 upvotes · 0 comments ## Summary The Ostium decentralized trading platform lost $23.75 million after attackers compromised its off-chain price feed infrastructure. By submitting fraudulent price reports, the attacker manipulated prices and rapidly opened and closed large leveraged positions to drain the liquidity provider vault. Trader collateral was held in a separate smart contract and was unaffected. The stolen USDC was swapped for ~12,080 ETH, with 10,540 ETH deposited into Tornado Cash. Trading has been paused since July 16, and Ostium has promised a post-mortem with technical details. ## Full article daily.dev links to this article rather than hosting it. Read it at the original source: ## Questions this post answers ### How did attackers steal $23.7 million from the Ostium DeFi platform? Attackers compromised off-chain infrastructure that feeds price data into Ostium's protocol, submitting fabricated price reports disguised as legitimate ones. They then rapidly opened and closed large leveraged positions based on these manipulated prices to generate artificial profits, draining the liquidity provider vault of $23.75 million while trader collateral in a separate contract stayed untouched. _Track how DeFi oracle exploits unfold and get mitigated by following security coverage on daily.dev._ ### What happened to the funds stolen in the Ostium hack? The exploiter swapped the stolen USDC for 12,080 Ethereum, according to blockchain security firm PeckShieldAlert, then deposited 10,540 of that Ethereum into Tornado Cash, a cryptocurrency mixer used to obscure the funds' origin and complicate tracing efforts by investigators. _Developers tracking crypto laundering techniques can follow ongoing security analysis on daily.dev._ ### Were Ostium trader funds affected by the price oracle attack? No, trader collateral was not stolen because it is held in a separate smart contract from the liquidity provider vault that was drained. Existing long and short positions remained open and were not closed or liquidated, though they are effectively frozen since trading was paused within 60 minutes of the first exploit transaction. _Anyone architecting DeFi contract isolation can compare real incident writeups like this on daily.dev._ ## Similar posts on daily.dev - [Polymarket confirms hackers stole $3M from users after third-party vendor was compromised](https://daily.dev/posts/polymarket-confirms-hackers-stole-3m-from-users-after-third-party-vendor-was-compromised-xjgaqqwd9) · The Next Web · 0 upvotes · 0 comments - [Polymarket customers lose $3 million in supply-chain attack](https://daily.dev/posts/polymarket-customers-lose-3-million-in-supply-chain-attack-udeprymjt) · BleepingComputer · 0 upvotes · 0 comments - [The Auditors Signed Off. The Money Left Anyway.](https://daily.dev/posts/the-auditors-signed-off-the-money-left-anyway--p8brhmwb5) · Coins Bench · 0 upvotes · 0 comments --- Tags: [#crypto](https://daily.dev/tags/crypto), [#smart-contracts](https://daily.dev/tags/smart-contracts), [#defi](https://daily.dev/tags/defi) [View this post on daily.dev](https://daily.dev/posts/hackers-steal-23-7-million-in-crypto-from-ostium-in-off-chain-attack-rfqz8umha) ```json {"@context":"https://schema.org","@graph":[{"@type":"Organization","@id":"https://daily.dev/#organization","name":"daily.dev","url":"https://daily.dev","logo":{"@type":"ImageObject","url":"https://daily.dev/apple-touch-icon.png","width":180,"height":180},"sameAs":["https://twitter.com/dailydotdev","https://github.com/dailydotdev","https://www.linkedin.com/company/daily-dev-ltd"]},{"@type":"WebSite","@id":"https://daily.dev/#website","url":"https://daily.dev","name":"daily.dev","publisher":{"@id":"https://daily.dev/#organization"},"potentialAction":{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https://daily.dev/search?q={search_term_string}"},"query-input":"required name=search_term_string"}}]} {"@context":"https://schema.org","@type":"TechArticle","headline":"Hackers steal $23.7 million in crypto from Ostium in off-chain attack","url":"https://daily.dev/posts/hackers-steal-23-7-million-in-crypto-from-ostium-in-off-chain-attack-rfqz8umha","mainEntityOfPage":{"@type":"WebPage","@id":"https://daily.dev/posts/hackers-steal-23-7-million-in-crypto-from-ostium-in-off-chain-attack-rfqz8umha"},"datePublished":"2026-07-20T22:23:48.638Z","dateModified":"2026-09-14T07:03:09.150Z","description":"The Ostium decentralized trading platform lost $23.75 million after attackers compromised its off-chain price feed infrastructure. By submitting fraudulent...","image":"https://media.daily.dev/image/upload/f_auto,q_auto/v1/posts/feab2927c2b254a34b86a01f491ac483?_a=AQAEuop","thumbnailUrl":"https://media.daily.dev/image/upload/f_auto,q_auto/v1/posts/feab2927c2b254a34b86a01f491ac483?_a=AQAEuop","isAccessibleForFree":true,"articleSection":"BleepingComputer","inLanguage":"en","publisher":{"@type":"Organization","name":"daily.dev","url":"https://daily.dev","logo":{"@type":"ImageObject","url":"https://daily.dev/apple-touch-icon.png","width":180,"height":180}},"author":{"@type":"Organization","name":"BleepingComputer","logo":"https://media.daily.dev/image/upload/s--as8nJ3qy--/f_auto,q_auto/v1774959951/logos/bleepingcomputer?_a=BAMAMiWQ0","url":"https://daily.dev/sources/bleepingcomputer"},"commentCount":0,"discussionUrl":"https://daily.dev/posts/hackers-steal-23-7-million-in-crypto-from-ostium-in-off-chain-attack-rfqz8umha","interactionStatistic":[{"@type":"InteractionCounter","interactionType":{"@type":"LikeAction"},"userInteractionCount":2},{"@type":"InteractionCounter","interactionType":{"@type":"CommentAction"},"userInteractionCount":0}],"keywords":"crypto,smart-contracts,defi","timeRequired":"PT3M"} {"@context":"https://schema.org","@type":"BreadcrumbList","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https://daily.dev"},{"@type":"ListItem","position":2,"name":"BleepingComputer","item":"https://daily.dev/sources/bleepingcomputer"},{"@type":"ListItem","position":3,"name":"Hackers steal $23.7 million in crypto from Ostium in off-chain attack"}]} {"@context":"https://schema.org","@type":"FAQPage","@id":"https://daily.dev/posts/hackers-steal-23-7-million-in-crypto-from-ostium-in-off-chain-attack-rfqz8umha#faq","mainEntity":[{"@type":"Question","name":"How did attackers steal $23.7 million from the Ostium DeFi platform?","acceptedAnswer":{"@type":"Answer","text":"Attackers compromised off-chain infrastructure that feeds price data into Ostium's protocol, submitting fabricated price reports disguised as legitimate ones. They then rapidly opened and closed large leveraged positions based on these manipulated prices to generate artificial profits, draining the liquidity provider vault of $23.75 million while trader collateral in a separate contract stayed untouched. Track how DeFi oracle exploits unfold and get mitigated by following security coverage on daily.dev."}},{"@type":"Question","name":"What happened to the funds stolen in the Ostium hack?","acceptedAnswer":{"@type":"Answer","text":"The exploiter swapped the stolen USDC for 12,080 Ethereum, according to blockchain security firm PeckShieldAlert, then deposited 10,540 of that Ethereum into Tornado Cash, a cryptocurrency mixer used to obscure the funds' origin and complicate tracing efforts by investigators. Developers tracking crypto laundering techniques can follow ongoing security analysis on daily.dev."}},{"@type":"Question","name":"Were Ostium trader funds affected by the price oracle attack?","acceptedAnswer":{"@type":"Answer","text":"No, trader collateral was not stolen because it is held in a separate smart contract from the liquidity provider vault that was drained. Existing long and short positions remained open and were not closed or liquidated, though they are effectively frozen since trading was paused within 60 minutes of the first exploit transaction. Anyone architecting DeFi contract isolation can compare real incident writeups like this on daily.dev."}}]} ```